bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
25/07/2024, 22:55

Target

bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe
Size

6KB
MD5

777b99ea8f394f6959171eb6092f5e76
SHA1

749581721a61efc188fd1a4f8b1202e0392fbc02
SHA256

bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062
SHA512

0057a93a714195764a131624fc67eabde3cdf8cc064e794ebdba666a22e8e6669e98e188dd4bedda404ab9e685c73d3cd0c8d0d4953117c8eb1d85430dfce9fd
SSDEEP

48:Scbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9u6O:B0mIGnFc/38+N4ZHJWSY9FI5Wqjx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 2780	2736	bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe	30
PID 2736 wrote to memory of 2780	2736	bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe	30
PID 2736 wrote to memory of 2780	2736	bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe	30

C:\Users\Admin\AppData\Local\Temp\bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe
"C:\Users\Admin\AppData\Local\Temp\bb1106ec04fef809ff2e100f65c73cab01dc061504b06439fd2c4c96516dc062.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2736 -s 32
  2⤵
  PID:2780