072a3e0f38816f6b22df58f34207840dfb6dd0aea594129972cda39c92685c94

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
29-06-2024 06:35

Target

2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe
Size

418KB
MD5

cba5b2afd9e43066ce15b081e0c1a772
SHA1

93c898dd50d2dd988e7bc6594a039b1fb5b45c3d
SHA256

072a3e0f38816f6b22df58f34207840dfb6dd0aea594129972cda39c92685c94
SHA512

b5a04f4d0fffb4c0a3e7c44505f285eb9caf23c6032f90bbafca2e8d6ea621f73e8937fec024271e6717cc9171874136f7a2e800c62bc500718b9527e484c788
SSDEEP

6144:Qgmf5hicujkUzMIvvj6JwxhNPBCdxX4kO8YtT:QvhIjkUzMIvLZbNPByok

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2288	1996	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 2288	1996	2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe	28
PID 1996 wrote to memory of 2288	1996	2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe	28
PID 1996 wrote to memory of 2288	1996	2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe	28
PID 1996 wrote to memory of 2288	1996	2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe	28

C:\Users\Admin\AppData\Local\Temp\2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-29_cba5b2afd9e43066ce15b081e0c1a772_karagany_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 168
  2⤵
  - Program crash
  PID:2288