52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 22:15

Target

52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe
Size

300KB
MD5

1088c5c912b70a419dcfa37c22851ad1
SHA1

5288b43c6503d13f83cc0fd5ba7c309a43fbabd1
SHA256

52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea
SHA512

5718b244e83977aa4c1c0f8f996ac7693950f45acb4b3f1bea6ccfc766d1b6bcbfaf9f835b5132a2dd4427ca734e99bfe74242bc0bc4ede6917eb9a3f73d97f9
SSDEEP

6144:UTigNItBg7/OlEf6zLOF6G/htyn6S+q0YdQwiHJgCUFb8R8QpO6XZLTm7ZvhJS89:gQdQwiHJgCUIzpOKZLTm7ZZ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2568 wrote to memory of 2024	2568	52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe	30
PID 2568 wrote to memory of 2024	2568	52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe	30
PID 2568 wrote to memory of 2024	2568	52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe	30

C:\Users\Admin\AppData\Local\Temp\52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe
"C:\Users\Admin\AppData\Local\Temp\52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2568
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2568 -s 528
  2⤵
  PID:2024

memory/2568-0-0x000007FEF5F53000-0x000007FEF5F54000-memory.dmp

Filesize
4KB

Download
memory/2568-1-0x0000000001240000-0x0000000001292000-memory.dmp

Filesize
328KB

Download
memory/2568-2-0x000007FEF5F53000-0x000007FEF5F54000-memory.dmp

Filesize
4KB

Download