e5d5ae98dab5cc0ff1e5936e97c6f2a462b61386ecca1c7a74a2a8cec578fda8

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 15:17

Target

GrudgeTerminator-main/Grudge.exe
Size

56KB
MD5

a39f8bf6746c577721f489a7130968ad
SHA1

ef9e7c2b0395a8104394f8eba5a334daf6077965
SHA256

fddd4a497d22b00bc8bd7ff0a088504542e9b0c4bd3517388f7eb6bb8fd05d48
SHA512

e87fb58bd94df36f91fa7a0492808251d27a4b96f952ada5f2ba999b28f6e61df4190f5c5a832f19dd3711774495f66114b721e793e6bfa9cbf8ccdbd62893c5
SSDEEP

1536:OmtHOlUpGZRXKhn1b+Rd3paSb4/xZwzI4lcfgUNUmnSx:N4lUmXs+T3paSb4X2I4lcfsySx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2220	2976	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2220	2976	Grudge.exe	30
PID 2976 wrote to memory of 2220	2976	Grudge.exe	30
PID 2976 wrote to memory of 2220	2976	Grudge.exe	30
PID 2976 wrote to memory of 2220	2976	Grudge.exe	30

C:\Users\Admin\AppData\Local\Temp\GrudgeTerminator-main\Grudge.exe
"C:\Users\Admin\AppData\Local\Temp\GrudgeTerminator-main\Grudge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 512
  2⤵
  - Program crash
  PID:2220

memory/2976-0-0x000000007419E000-0x000000007419F000-memory.dmp

Filesize
4KB

Download
memory/2976-1-0x0000000000A90000-0x0000000000AA4000-memory.dmp

Filesize
80KB

Download