4f5c33b54a841bae7acb0e8216de5120a5b068ac60cfd158eca260d1f83cf067

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
18-05-2024 08:45

Target

1408_cn_V8.3.0.0/1408_cn_8.3.0.0/DVP/Net Player.exe
Size

2.5MB
MD5

f9166494f1985a3eddba32daa0b5bcc2
SHA1

5cc399423c3045ba0dae8d86d36eaf4f2c46813f
SHA256

6126705a56b664f9f652e40eae03bc1c279e6dd9a31f47786099e70b84b55c87
SHA512

36a9474af423f34a990ba108258a5e01bbeea04bedf78f837988df620a3cedb6619c53ffe330f541001e835b4fffe451a6814540ec64c37c47a44238842dbc63
SSDEEP

24576:Yv0rfSlemjqiKz25Z4MP79SSeq0wnlY/p0o8QQQQQQQQQQVxpVVVVVVVVVVVVVVg:Ylko4MP79jeq0wnlY+oYxc/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2204 1684 WerFault.exe Net Player.exe

pid	pid_target	process	target process
2204	1684	WerFault.exe	Net Player.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

Net Player.exe

description	pid	process	target process
PID 1684 wrote to memory of 2204	1684	Net Player.exe	WerFault.exe
PID 1684 wrote to memory of 2204	1684	Net Player.exe	WerFault.exe
PID 1684 wrote to memory of 2204	1684	Net Player.exe	WerFault.exe
PID 1684 wrote to memory of 2204	1684	Net Player.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\1408_cn_V8.3.0.0\1408_cn_8.3.0.0\DVP\Net Player.exe
"C:\Users\Admin\AppData\Local\Temp\1408_cn_V8.3.0.0\1408_cn_8.3.0.0\DVP\Net Player.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 172
2⤵
- Program crash
PID:2204

memory/1684-0-0x0000000000400000-0x0000000000877000-memory.dmp

Filesize
4.5MB

Download