33d5f473188dd21420a51528eb548e3c496378de3e6ff0e0acc1855b324c0a32

Analysis

max time kernel
47s
max time network
16s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30-06-2024 09:14

Target

C2Panel-main/C2Panel.exe
Size

490KB
MD5

9c9245810bad661af3d6efec543d34fd
SHA1

93e4f301156d120a87fe2c4be3aaa28b9dfd1a8d
SHA256

f5f14b9073f86da926a8ed319b3289b893442414d1511e45177f6915fb4e5478
SHA512

90d9593595511e722b733a13c53d2e69a1adc9c79b3349350deead2c1cdfed615921fb503597950070e9055f6df74bb64ccd94a60d7716822aa632699c70b767
SSDEEP

6144:3PkcFUUUQHs5TlOhDuy4VjmSO6/tU4j06xeJyCjvhsXZ4m05d0qCsfBLuWWCV/rr:3McWUUysz/NhKjJPhM4/5bV/rvgE3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2932	2204	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2932	2204	C2Panel.exe	29
PID 2204 wrote to memory of 2932	2204	C2Panel.exe	29
PID 2204 wrote to memory of 2932	2204	C2Panel.exe	29
PID 2204 wrote to memory of 2932	2204	C2Panel.exe	29

C:\Users\Admin\AppData\Local\Temp\C2Panel-main\C2Panel.exe
"C:\Users\Admin\AppData\Local\Temp\C2Panel-main\C2Panel.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 128
  2⤵
  - Program crash
  PID:2932

memory/2204-0-0x00000000000E0000-0x000000000012B000-memory.dmp

Filesize
300KB

Download
memory/2204-5-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2204-6-0x00000000000E0000-0x000000000012B000-memory.dmp

Filesize
300KB

Download