a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
30/07/2024, 02:10

Target

a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe
Size

1.3MB
MD5

c7ea74a05e864d4d67a2fba6be3bb667
SHA1

be91a12de06e01a7e10b1dd514dbedb699f180e4
SHA256

a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90
SHA512

ad03970be59ae08deaf69ffe3078704f9471a76789c040d695a21ab4ffd95377137ab64f19e33f6d9a9fa1b4ec11bd1c66b4a5bbc55dc413cd79aa6376b6a713
SSDEEP

24576:fWljizSawkL2zmeaAit8v1hUw+hqPNKLkFh:+l2akSz+AitK5EAF

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1232 wrote to memory of 744	1232	a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe	30
PID 1232 wrote to memory of 744	1232	a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe	30
PID 1232 wrote to memory of 744	1232	a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe	30

C:\Users\Admin\AppData\Local\Temp\a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe
"C:\Users\Admin\AppData\Local\Temp\a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1232
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1232 -s 264
  2⤵
  PID:744