44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 10:51

Target

44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe
Size

113KB
MD5

f5f8160fe8468a77b6a495155c3dacea
SHA1

20d61c337653392ea472352931820dc60c37b2bc
SHA256

44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2
SHA512

c65b86d579f7c0defba655ce440a20f1bb5447e058861540e92d80968131d40cc9fa42defb2c613d92de323f42301f59eacc6cfce5f34ca2c2170f0692919db8
SSDEEP

3072:VKMMWFhWGRGhZIzPic5RbQ9b4R1DcMxaiJe:AMZh1kUPiMMKR1DTJ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2740 wrote to memory of 2384	2740	44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe	29
PID 2740 wrote to memory of 2384	2740	44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe	29
PID 2740 wrote to memory of 2384	2740	44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe	29

C:\Users\Admin\AppData\Local\Temp\44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe
"C:\Users\Admin\AppData\Local\Temp\44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2740
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2740 -s 36
  2⤵
  PID:2384