bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 23:24

Target

bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe
Size

6KB
MD5

2e6cc72cd3fde15e319809ab39a065e0
SHA1

93520caa6e361aa3d260d199650a632954f8bd7f
SHA256

bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446
SHA512

3e530049ad96d999c040c4a8adb3cb4dde28cbe256d805d49797a8bb0623c5a776d0c699b3497c7c0668eaa3d1a2e4e8232bf2885f820cf8ec7274b26dc18596
SSDEEP

48:S7bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uxO:m0mIGnFc/38+N4ZHJWSY9FI5Wqqx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2316	2232	bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe	28
PID 2232 wrote to memory of 2316	2232	bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe	28
PID 2232 wrote to memory of 2316	2232	bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe	28

C:\Users\Admin\AppData\Local\Temp\bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe
"C:\Users\Admin\AppData\Local\Temp\bae2cacafd5afaabf01c5dc1673694abe2a007aa565fc00b9f7b7d1e28fd3446.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2232 -s 32
  2⤵
  PID:2316