b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064

Analysis

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 23:05

Target

b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe
Size

6KB
MD5

5909e37f34b40da18c508e8a8f9c7343
SHA1

d40a64bdc517555ee0bab540a7c03e997c78525b
SHA256

b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064
SHA512

d4655697b09e5979e6913a2e88526efeba5623cc3c7005fe766e15738f8405518eb8f8a7b3792e5909a97c9c932b8124d47d1eb5da74aaa5be361e752691720c
SSDEEP

48:Smbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9u7O:/0mIGnFc/38+N4ZHJWSY9FI5Wq0x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2800	2328	b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe	30
PID 2328 wrote to memory of 2800	2328	b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe	30
PID 2328 wrote to memory of 2800	2328	b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe	30

C:\Users\Admin\AppData\Local\Temp\b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe
"C:\Users\Admin\AppData\Local\Temp\b5514c936bc59de1c665019d674691f982c2f8e4361ffa60bdc583383094f064.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2328 -s 32
  2⤵
  PID:2800