e32d7f63e7d4feb47d830839301179631caf4c818b4b071306e4ee0a893438ea

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 17:20

Target

wake-synchotron-v1.0/Player.exe
Size

15KB
MD5

eae7556aaf215a32903c72688e11463a
SHA1

91d82c7a84dd63b4045b2c158510080ba04c631a
SHA256

3882b9119101ec081f7ed8c6c9f19f34799325de919b139ed974a6ca43725e00
SHA512

fafa752286805a0572faf5d0e07b58c96359c4cd8d363869744569e3d0bfb202473105a6db1b3351b7c852cdfbd607c655c48ff765b086a4c57237faa3781277
SSDEEP

192:qAD1n/OGTTGzsg6bNqOBQQlef3NKMR8UOoTkGiM8I88zJm8bJ5jsEJSL9Z:7gsNBqh6NMFkG08z55jsEy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2644	2200	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 2644	2200	Player.exe	29
PID 2200 wrote to memory of 2644	2200	Player.exe	29
PID 2200 wrote to memory of 2644	2200	Player.exe	29
PID 2200 wrote to memory of 2644	2200	Player.exe	29

C:\Users\Admin\AppData\Local\Temp\wake-synchotron-v1.0\Player.exe
"C:\Users\Admin\AppData\Local\Temp\wake-synchotron-v1.0\Player.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 792
  2⤵
  - Program crash
  PID:2644

memory/2200-0-0x0000000074A3E000-0x0000000074A3F000-memory.dmp

Filesize
4KB

Download
memory/2200-1-0x0000000000890000-0x000000000089A000-memory.dmp

Filesize
40KB

Download
memory/2200-2-0x00000000002A0000-0x00000000002CA000-memory.dmp

Filesize
168KB

Download
memory/2200-3-0x00000000007A0000-0x00000000007EA000-memory.dmp

Filesize
296KB

Download
memory/2200-4-0x0000000000840000-0x000000000088C000-memory.dmp

Filesize
304KB

Download
memory/2200-5-0x0000000000940000-0x0000000000966000-memory.dmp

Filesize
152KB

Download
memory/2200-6-0x0000000000970000-0x0000000000982000-memory.dmp

Filesize
72KB

Download
memory/2200-7-0x00000000009E0000-0x0000000000A04000-memory.dmp

Filesize
144KB

Download
memory/2200-8-0x0000000004810000-0x000000000484A000-memory.dmp

Filesize
232KB

Download
memory/2200-9-0x00000000048C0000-0x00000000048F8000-memory.dmp

Filesize
224KB

Download
memory/2200-10-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download
memory/2200-11-0x0000000074A3E000-0x0000000074A3F000-memory.dmp

Filesize
4KB

Download
memory/2200-12-0x0000000074A30000-0x000000007511E000-memory.dmp

Filesize
6.9MB

Download