24153f9a9386f5c7ae32c95db0197cec5c44aea926d828cf55257a6e67ae1f36

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 18:51

Target

Hyper HWID Spoofer/Hypermenu.xyz.exe
Size

22KB
MD5

8a01ba7478b27738627dc21007666c0c
SHA1

8a30a8363b9df752b2355a52d1dd8471f29e80bd
SHA256

d58f364262f470c7c81529b4bb49afff9176f9e280548e34e5da15fa8393e1f7
SHA512

3fead3d541550ce1a15e18fa643a4661b06a3066789093a0b02bc78ac9f7bbc10326da6d9cb4eb692ec6c3671020ea3d9b52dca1324ce4171e79d9312dfe983c
SSDEEP

192:AhzUOedDI04du6++tS4se5WC75pddjLfZRW2Mopagp6F8akp4rmj94trLiB+FnDp:uLedPfZh0jLfZRWfeLE8XstrLK2u

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Hypermenu.xyz.exe

description	pid	process	target process
PID 2416 wrote to memory of 2332	2416	Hypermenu.xyz.exe	WerFault.exe
PID 2416 wrote to memory of 2332	2416	Hypermenu.xyz.exe	WerFault.exe
PID 2416 wrote to memory of 2332	2416	Hypermenu.xyz.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\Hyper HWID Spoofer\Hypermenu.xyz.exe
"C:\Users\Admin\AppData\Local\Temp\Hyper HWID Spoofer\Hypermenu.xyz.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2416 -s 500
2⤵
PID:2332

memory/2416-0-0x000007FEF5C23000-0x000007FEF5C24000-memory.dmp

Filesize
4KB

Download
memory/2416-1-0x00000000011E0000-0x00000000011EC000-memory.dmp

Filesize
48KB

Download
memory/2416-2-0x000007FEF5C23000-0x000007FEF5C24000-memory.dmp

Filesize
4KB

Download