92a314bf9cd8a43b29277834d900c82f7a2e978dcc19ba1dcad373d56217a623

Analysis

max time kernel
140s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 08:31

Target

FİYAT TEKLİF İSTEĞİ.exe
Size

1.2MB
MD5

d123259f0d919be4c30c511debd1ea8d
SHA1

2fb20310b104f57e4810d512f138a47e2fb1f8b2
SHA256

92a314bf9cd8a43b29277834d900c82f7a2e978dcc19ba1dcad373d56217a623
SHA512

3c5de0afce6edb67c5fca44d5af3ca16076be6d993013acb709a4bd7bf30540ef55b9919a0879924f150adf97ec537b5fdc7e4ad83323350583439869289c062
SSDEEP

24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8apoVBYCk70ww7TNF:xTvC/MTQYxsWR7apo8O

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1616	2740	WerFault.exe	81

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2740	FİYAT TEKLİF İSTEĞİ.exe
2740	FİYAT TEKLİF İSTEĞİ.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2740	FİYAT TEKLİF İSTEĞİ.exe
2740	FİYAT TEKLİF İSTEĞİ.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2740 wrote to memory of 2600	2740	FİYAT TEKLİF İSTEĞİ.exe	85
PID 2740 wrote to memory of 2600	2740	FİYAT TEKLİF İSTEĞİ.exe	85
PID 2740 wrote to memory of 2600	2740	FİYAT TEKLİF İSTEĞİ.exe	85

C:\Users\Admin\AppData\Local\Temp\FİYAT TEKLİF İSTEĞİ.exe
"C:\Users\Admin\AppData\Local\Temp\FİYAT TEKLİF İSTEĞİ.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2740
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
  "C:\Users\Admin\AppData\Local\Temp\FİYAT TEKLİF İSTEĞİ.exe"
  2⤵
  PID:2600
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 736
  2⤵
  - Program crash
  PID:1616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2740 -ip 2740
1⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\aut32F7.tmp

Filesize
263KB

MD5
9f0b84bb4dd9938dac47b0a24a1aaf38

SHA1
f80e338f714cd4df612b0558200f35917cfa7d03

SHA256
bd0f7defce49abcdc5e9a1b546fb1ca6b0f6cccba0c0f761bf5deae6125c9d82

SHA512
2196b8e4ceb3f3da4cfe40b6392b958555e624ca6cf369e1f8f05909873d6137eca0cf474c20323b5b7928637aaaca07ba69d3594be6a9c6bcfe50f65390d300

Download Submit
memory/2740-12-0x00000000036B0000-0x00000000036B4000-memory.dmp

Filesize
16KB

Download