5251a8e8d7f924572e563bf7ebe78dbcb71c94811aa39c45f548caa1ea8ab870

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 12:41

Target

GithubClicker.exe
Size

57KB
MD5

03403de9bb63df13ee2cc2ab6096c901
SHA1

81e3159d338c5a5ba76e3f8580f2540fb8afa408
SHA256

5251a8e8d7f924572e563bf7ebe78dbcb71c94811aa39c45f548caa1ea8ab870
SHA512

bb0d77cde531a290ea541d976f3b7f4483df7ce2cd519481dbbdf9ecae1bdd255554a1fd12b8cb4e81d28759c046b690be6dfd3b90a6baa894fb2b8329e98fa0
SSDEEP

768:Z6OCjOWKs/zjTH9VCsOdbXFZz26+h3hcga1o2mClaxDs1k7UBkrmYNPnGmDBpf1k:7KxCpw64Pxp4ExRx2DM/mBT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2020	2036	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2020	2036	GithubClicker.exe	28
PID 2036 wrote to memory of 2020	2036	GithubClicker.exe	28
PID 2036 wrote to memory of 2020	2036	GithubClicker.exe	28
PID 2036 wrote to memory of 2020	2036	GithubClicker.exe	28

C:\Users\Admin\AppData\Local\Temp\GithubClicker.exe
"C:\Users\Admin\AppData\Local\Temp\GithubClicker.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 624
  2⤵
  - Program crash
  PID:2020

memory/2036-0-0x000000007495E000-0x000000007495F000-memory.dmp

Filesize
4KB

Download
memory/2036-1-0x0000000000E40000-0x0000000000E54000-memory.dmp

Filesize
80KB

Download
memory/2036-2-0x0000000074950000-0x000000007503E000-memory.dmp

Filesize
6.9MB

Download
memory/2036-3-0x0000000074950000-0x000000007503E000-memory.dmp

Filesize
6.9MB

Download