1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30/05/2024, 01:03

Target

1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe
Size

25KB
MD5

df3d30ca2e5a619954e0996f40bf8d2d
SHA1

eab5b79a29c194793fc45bcedcd2fe0b0b941ddb
SHA256

1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb
SHA512

37d1fdac89355145efa06fd61cbab8218dbc5501ab28a895ff3e65f9f46cd4586dadbd4f22ec299fa9840caeb4c30854098d42ec1c45ae72a1a54db463a03b0c
SSDEEP

768:3EHP8dBn3HQVOaoM41v1hbV7dgm3Hrda:3EHP8dyIZttdX3w

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2320 wrote to memory of 2512	2320	1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe	29
PID 2320 wrote to memory of 2512	2320	1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe	29
PID 2320 wrote to memory of 2512	2320	1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe	29

C:\Users\Admin\AppData\Local\Temp\1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe
"C:\Users\Admin\AppData\Local\Temp\1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2320
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2320 -s 532
  2⤵
  PID:2512

memory/2320-1-0x0000000000050000-0x000000000005C000-memory.dmp

Filesize
48KB

Download
memory/2320-0-0x000007FEF5C43000-0x000007FEF5C44000-memory.dmp

Filesize
4KB

Download