894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 02:22

Target

894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe
Size

6KB
MD5

7115f1f39a0a8862a54a46563a2ebc49
SHA1

070de7006b79c42f89c4aaf68643ecd855ece837
SHA256

894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509
SHA512

3717daef83c6e3493f146a3759bb1f22cfd7e521ac33986afb55da5e08ec57a1b1a0ba1d3a3d78b3abdcb35104f0b3ce2b5630287d6f52c87c0c2fc1568f227b
SSDEEP

48:S/bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uSX:+0mIGnFc/38+N4ZHJWSY9FI5WqF4x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 2372	2104	894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe	28
PID 2104 wrote to memory of 2372	2104	894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe	28
PID 2104 wrote to memory of 2372	2104	894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe	28

C:\Users\Admin\AppData\Local\Temp\894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe
"C:\Users\Admin\AppData\Local\Temp\894421bc2109f868ef794a4f87635138facf023636df34553346e3235a789509.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2104 -s 32
  2⤵
  PID:2372