bf57ecc196f73c5fe511bc034d34eaf47445268f9ea7fddc9d9c866a960a7c87

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 04:33

Target

2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe
Size

12.0MB
MD5

5fbb44baf76561ff355a0666ce386a9a
SHA1

45a2e73c38856072d7227906e660278da6ecce4d
SHA256

bf57ecc196f73c5fe511bc034d34eaf47445268f9ea7fddc9d9c866a960a7c87
SHA512

4599213d1902fa1504ad3bd7915aed4a9e5e0c65f1c931f165dc7cb728e4c20cae09d0b2ddaa1f4e971a66ce0cc35fc22a323a2069b3cdb6a6ca5c1505d36c4b
SSDEEP

98304:f702IlrJkpz4C6uJTVz7z4OWxRppBYBYFD2GW7bWGnu4aagJ3U8mvG:f7at47TJ7z4OW1pBeGW7bpuxagJ3RoG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1176 wrote to memory of 1904	1176	2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe	29
PID 1176 wrote to memory of 1904	1176	2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe	29
PID 1176 wrote to memory of 1904	1176	2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe	29

C:\Users\Admin\AppData\Local\Temp\2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-27_5fbb44baf76561ff355a0666ce386a9a_megazord.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1176
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1176 -s 432
  2⤵
  PID:1904

memory/1176-0-0x00000001404DA000-0x00000001404DB000-memory.dmp

Filesize
4KB

Download