653eaa58999ff72cd9e858a9661c87b049fc66172d20fc9ae0f1e3b1e2af694b

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
28/04/2024, 16:38

Target

Fluxus V7.exe
Size

3.9MB
MD5

aa5d196260f56a93d7a9ddf32d202112
SHA1

4abe547da7e38e9facb98523e4795a71af6b4600
SHA256

653eaa58999ff72cd9e858a9661c87b049fc66172d20fc9ae0f1e3b1e2af694b
SHA512

7cf76918a4d04c628cc4e7b3a7f2674c03b97104e98b98ab8407d2e12521e48dc61438d982cfdc9763deaa1b915e4432a972274dd6ac381a5a58f08e1ffd55d5
SSDEEP

49152:XgLIR9JyCns59qfuce05XlWycazyClY1YH8PnGpv80tbvvqVUcZ:XgLIRfyC7egWJa3lY1U82kmvvoUc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2288	2036	WerFault.exe	27

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2036	Fluxus V7.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2288	2036	Fluxus V7.exe	28
PID 2036 wrote to memory of 2288	2036	Fluxus V7.exe	28
PID 2036 wrote to memory of 2288	2036	Fluxus V7.exe	28
PID 2036 wrote to memory of 2288	2036	Fluxus V7.exe	28

C:\Users\Admin\AppData\Local\Temp\Fluxus V7.exe
"C:\Users\Admin\AppData\Local\Temp\Fluxus V7.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 1048
  2⤵
  - Program crash
  PID:2288

memory/2036-0-0x00000000001F0000-0x00000000005E4000-memory.dmp

Filesize
4.0MB

Download
memory/2036-1-0x0000000073FD0000-0x00000000746BE000-memory.dmp

Filesize
6.9MB

Download
memory/2036-2-0x0000000004FC0000-0x0000000005000000-memory.dmp

Filesize
256KB

Download
memory/2036-4-0x00000000001C0000-0x00000000001CA000-memory.dmp

Filesize
40KB

Download
memory/2036-3-0x00000000001C0000-0x00000000001CA000-memory.dmp

Filesize
40KB

Download
memory/2036-5-0x0000000073FD0000-0x00000000746BE000-memory.dmp

Filesize
6.9MB

Download
memory/2036-6-0x0000000004FC0000-0x0000000005000000-memory.dmp

Filesize
256KB

Download
memory/2036-7-0x00000000001C0000-0x00000000001CA000-memory.dmp

Filesize
40KB

Download
memory/2036-8-0x00000000001C0000-0x00000000001CA000-memory.dmp

Filesize
40KB

Download