507641e3047216809af93a127af70a266e273cd95c1cfaa06605a753b9166388

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 14:33

Target

Delta V3.61/Delta.exe
Size

17.0MB
MD5

774ffee84d8e760761b8819edd2bc252
SHA1

74ff2bcc3baf64790181b97dc09ab951d9440379
SHA256

3c2cbcfb0dc0b92e1a0f15e725a1f8c4756a990e298098d94087cdd3fd491758
SHA512

935624fdaa9ae57d4515a456a9383c20240988848046fcab69948450413e573167c0f17a456f0f5120ec13e3215759ad11c4857873900606116c3e495dd69650
SSDEEP

196608:LOM8QZXcqPrn0guhegnueaIN3l4X+yBXeLUpcgwBj9aR:LOM8EmegnBaS1C+yBaUpcgwBj0

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1988 1844 WerFault.exe Delta.exe

pid	pid_target	process	target process
1988	1844	WerFault.exe	Delta.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

Delta.exe

description	pid	process	target process
PID 1844 wrote to memory of 1988	1844	Delta.exe	WerFault.exe
PID 1844 wrote to memory of 1988	1844	Delta.exe	WerFault.exe
PID 1844 wrote to memory of 1988	1844	Delta.exe	WerFault.exe
PID 1844 wrote to memory of 1988	1844	Delta.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\Delta V3.61\Delta.exe
"C:\Users\Admin\AppData\Local\Temp\Delta V3.61\Delta.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1844 -s 808
  2⤵
  - Program crash
  PID:1988

memory/1844-0-0x000000007481E000-0x000000007481F000-memory.dmp

Filesize
4KB

Download
memory/1844-1-0x0000000000BE0000-0x0000000001CE6000-memory.dmp

Filesize
17.0MB

Download
memory/1844-2-0x0000000074810000-0x0000000074EFE000-memory.dmp

Filesize
6.9MB

Download
memory/1844-4-0x0000000000380000-0x000000000038A000-memory.dmp

Filesize
40KB

Download
memory/1844-3-0x0000000000380000-0x000000000038A000-memory.dmp

Filesize
40KB

Download
memory/1844-5-0x000000007481E000-0x000000007481F000-memory.dmp

Filesize
4KB

Download
memory/1844-6-0x0000000074810000-0x0000000074EFE000-memory.dmp

Filesize
6.9MB

Download
memory/1844-7-0x0000000000380000-0x000000000038A000-memory.dmp

Filesize
40KB

Download
memory/1844-8-0x0000000000380000-0x000000000038A000-memory.dmp

Filesize
40KB

Download
memory/1844-9-0x0000000074810000-0x0000000074EFE000-memory.dmp

Filesize
6.9MB

Download