f2da3ad65646e73981fd8fb1dc25f2ca331a662600bfb7ff41696fe5dbf74ad4

Analysis

max time kernel
44s
max time network
16s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04-05-2024 19:57

Target

SolaraBETA (2)/Solara.exe
Size

87KB
MD5

c61ea149a799fad804a6b157a48b713a
SHA1

36212a1cd7b3cd2d3909d28fcac482977fdc2214
SHA256

108c88858bfe52105c794b58d89d423940e7a1a3a2a4502c1a327672defeae09
SHA512

5cd298aea469b0d30f84ee04a20077a4bd7ca6c500e07f02d476730442a7e1623dd3ba84615151c949e7966a1fb07c2ea8a14b9aa9086db443051248dded8224
SSDEEP

1536:luWT5UfP85Az9I3BbbHVlnOXrPBdfeIScnVl801AbcsqD95wSxdRfBq:luWmn85AxMbb1lnOXrPXe7thq5Z5q

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 2576	3052	Solara.exe	28
PID 3052 wrote to memory of 2576	3052	Solara.exe	28
PID 3052 wrote to memory of 2576	3052	Solara.exe	28

C:\Users\Admin\AppData\Local\Temp\SolaraBETA (2)\Solara.exe
"C:\Users\Admin\AppData\Local\Temp\SolaraBETA (2)\Solara.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3052
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3052 -s 992
  2⤵
  PID:2576

memory/3052-0-0x000007FEF5E93000-0x000007FEF5E94000-memory.dmp

Filesize
4KB

Download
memory/3052-1-0x000000013FE50000-0x000000013FE6A000-memory.dmp

Filesize
104KB

Download
memory/3052-2-0x000007FEF5E90000-0x000007FEF687C000-memory.dmp

Filesize
9.9MB

Download
memory/3052-3-0x000000001BD60000-0x000000001C29C000-memory.dmp

Filesize
5.2MB

Download
memory/3052-4-0x00000000007D0000-0x00000000007DE000-memory.dmp

Filesize
56KB

Download
memory/3052-6-0x00000000007F0000-0x00000000007FA000-memory.dmp

Filesize
40KB

Download
memory/3052-7-0x00000000007F0000-0x00000000007FA000-memory.dmp

Filesize
40KB

Download
memory/3052-5-0x000007FEF5E90000-0x000007FEF687C000-memory.dmp

Filesize
9.9MB

Download
memory/3052-8-0x00000000021C0000-0x000000000223E000-memory.dmp

Filesize
504KB

Download
memory/3052-9-0x000007FEF6A80000-0x000007FEF6AA4000-memory.dmp

Filesize
144KB

Download
memory/3052-10-0x000000001D240000-0x000000001D2F2000-memory.dmp

Filesize
712KB

Download
memory/3052-11-0x000007FEF5E93000-0x000007FEF5E94000-memory.dmp

Filesize
4KB

Download
memory/3052-13-0x000007FEF5E90000-0x000007FEF687C000-memory.dmp

Filesize
9.9MB

Download
memory/3052-14-0x00000000007F0000-0x00000000007FA000-memory.dmp

Filesize
40KB

Download