0f21e17d3cc43528a572edfdbfefc12fa15e99e230a4eae2107280c2f8b8fd5b

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
12/06/2024, 07:35

Target

SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe
Size

575KB
MD5

a1c6332470b731da9f3044da04326d54
SHA1

60aeaf8015a13b953683379ec5af17fbf9dc675e
SHA256

0f21e17d3cc43528a572edfdbfefc12fa15e99e230a4eae2107280c2f8b8fd5b
SHA512

77194ecf022289e0a00c89297ad97aa3fb9ea77695caa66b7b9706a67446751cbf41f1c7066a3e008b88b6c5f5fa75aa27ef6586847ba17da5a5f4d25953441c
SSDEEP

12288:hlK3dQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ/HlFnGKyo:hlK3ylFnGKyo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2580	2188	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 2580	2188	SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe	28
PID 2188 wrote to memory of 2580	2188	SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe	28
PID 2188 wrote to memory of 2580	2188	SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe	28
PID 2188 wrote to memory of 2580	2188	SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe	28

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Delf-IIY.6884.24698.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 148
  2⤵
  - Program crash
  PID:2580