cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02-05-2024 03:47

Target

cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe
Size

319KB
MD5

6bca2e698988bbb17e4ef7a3e42b2e32
SHA1

7d48556446d2c9aad68dd8d6a722299a001963db
SHA256

cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537
SHA512

6098a844d7ad8137f96555619081f19be5f55764117e10abc46954dd60b277ae24cd513de652a37f2d07590bb6f6859f1f35e98eb0ce164d4a04c79620e4c520
SSDEEP

3072:zhfATk0/KX4Uh4L97QQkhxV03njPwWL5xifPsVavgCGpuVZ5E8ARRxVpVOOHiuOY:zqKXmeqkWLKfPsVatLeyVC

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1740 wrote to memory of 2896	1740	cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe	28
PID 1740 wrote to memory of 2896	1740	cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe	28
PID 1740 wrote to memory of 2896	1740	cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe	28

C:\Users\Admin\AppData\Local\Temp\cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe
"C:\Users\Admin\AppData\Local\Temp\cd7df9b90b296511e4d84cea669366345af2664064d4d04a9feeae19bb75d537.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1740
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1740 -s 700
  2⤵
  PID:2896

memory/1740-0-0x000007FEF5B03000-0x000007FEF5B04000-memory.dmp

Filesize
4KB

Download
memory/1740-1-0x0000000000040000-0x0000000000094000-memory.dmp

Filesize
336KB

Download
memory/1740-2-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/1740-4-0x0000000000430000-0x000000000043A000-memory.dmp

Filesize
40KB

Download
memory/1740-3-0x0000000000430000-0x000000000043A000-memory.dmp

Filesize
40KB

Download
memory/1740-5-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/1740-6-0x000007FEF5B03000-0x000007FEF5B04000-memory.dmp

Filesize
4KB

Download
memory/1740-7-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/1740-8-0x0000000000430000-0x000000000043A000-memory.dmp

Filesize
40KB

Download
memory/1740-9-0x0000000000430000-0x000000000043A000-memory.dmp

Filesize
40KB

Download