87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483

Analysis

max time kernel
121s
max time network
129s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-04-2024 01:38

Target

87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe
Size

1.9MB
MD5

6a4f246a181decbf79baa551f7ac30cb
SHA1

836b1426f19783493dc0a14d4e6df1dc6f11d71c
SHA256

87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483
SHA512

4202cea33a34243ca2bcc9fdcf29d27e685c515b4c78e7d0cf8e955906d0f22e27ca2e9914d5ac25d16624194dc77e1604d3c5f8bbfcb2febd30cefb71f9917e
SSDEEP

24576:mepPgSXXd19gHSo2R1saXkaxidAXrw/hASIe4EVh9Bruskku4cWKlLM:mwYfcsa0vWJE3XvkWKl

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe

description	pid	process	target process
PID 2900 wrote to memory of 2136	2900	87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe	WerFault.exe
PID 2900 wrote to memory of 2136	2900	87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe	WerFault.exe
PID 2900 wrote to memory of 2136	2900	87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe
"C:\Users\Admin\AppData\Local\Temp\87df205452e0a45ce91752b2a3445f2aac510ac86496176dd53ffd7f4c49f483.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2900

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2900 -s 448
2⤵
PID:2136