75222e16cd10871ee22824c508a1027686017ca90cadf3b84ce576d51e78f40a

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 12:08

Target

dotnet-aspnet-codegenerator-design.exe
Size

52KB
MD5

67fd9733820d7ebaa4554d7d8e2f5dde
SHA1

6d3d4546bea1595f5c0717d8266662795023d5ae
SHA256

75222e16cd10871ee22824c508a1027686017ca90cadf3b84ce576d51e78f40a
SHA512

6d4998f1fd9edd5a05f5cf5524c5484e0469c679798100113b33cb2a37d14284d802e88867cdf315c8c34577d81ed8eb8e20521232aeb60ac2a64d703a10206f
SSDEEP

768:3qvOpb3I+aT/LnQO1SUUvVBS0WvP5z7oZXJnu8rJv3hzZ3d2N3ZcKUJu9zWF9:3qWJI+0/SLtBoRzUZY8l9ZEhZc/qzWH

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 2072	2936	dotnet-aspnet-codegenerator-design.exe	30
PID 2936 wrote to memory of 2072	2936	dotnet-aspnet-codegenerator-design.exe	30
PID 2936 wrote to memory of 2072	2936	dotnet-aspnet-codegenerator-design.exe	30

C:\Users\Admin\AppData\Local\Temp\dotnet-aspnet-codegenerator-design.exe
"C:\Users\Admin\AppData\Local\Temp\dotnet-aspnet-codegenerator-design.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2936 -s 496
  2⤵
  PID:2072

memory/2936-0-0x000007FEF5743000-0x000007FEF5744000-memory.dmp

Filesize
4KB

Download
memory/2936-1-0x00000000009A0000-0x00000000009B0000-memory.dmp

Filesize
64KB

Download
memory/2936-2-0x000007FEF5743000-0x000007FEF5744000-memory.dmp

Filesize
4KB

Download