b3b8baae3ca6b7d301d5bcd45859c6f00eef17bdd8b2ef1d7571b85d83fef4e4

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 11:46

Target

Wopti.v7.91.Build.9.115.By.MyCrack/D3DX81ab.dll
Size

333KB
MD5

bcff56f41e11f624d520cb390592b9bd
SHA1

76450720967bcb9131ac87349b344bef5a4000df
SHA256

f26f8877499bcc74327dbf5befc5940e75ac42464bdd567b7bd010d1b8db77f1
SHA512

9d07b5d32ca138d4ca4dbcee65003e4e399e90a1ee7a8d14fd64b303c00b409a1a3500234c6c8b5d0854258d7d97ed0dc07b597e34ff25212ad212e7697e8ae8
SSDEEP

6144:odn7KUO/dJTwFUN8Gtioi/0Y7f8GrA8KYrYWCVfBCIFZU2/7JlkJvg9A:qCJTjWGtLinUGrLeEIfktgS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4680	2340	WerFault.exe	84

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1876 wrote to memory of 2340	1876	rundll32.exe	84
PID 1876 wrote to memory of 2340	1876	rundll32.exe	84
PID 1876 wrote to memory of 2340	1876	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wopti.v7.91.Build.9.115.By.MyCrack\D3DX81ab.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wopti.v7.91.Build.9.115.By.MyCrack\D3DX81ab.dll,#1
  2⤵
  PID:2340
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2340 -s 616
    3⤵
    - Program crash
    PID:4680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2340 -ip 2340
1⤵
PID:4552

memory/2340-0-0x0000000010000000-0x00000000100AD000-memory.dmp

Filesize
692KB

Download
memory/2340-2-0x0000000010000000-0x00000000100AD000-memory.dmp

Filesize
692KB

Download