195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
02/08/2024, 12:51

Target

195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe
Size

1.3MB
MD5

71d5a63a7da94ab1b052d9a0150ba397
SHA1

d7d3d6f72060ae42f3c7b419d226c6f99789840b
SHA256

195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d
SHA512

7922e601c61bb405a589c5006f83dc6f5a893b6ed16494f223b20156e14f3314c9e8aa98776c4a10100c1d11b32d70856f979e765539655c4ced2167c43d6a4a
SSDEEP

6144:8KU+a2q3lUT6nw10zIffT6nw10zIffT6nw10zIffT6nw10zIffT6nw10zIffT6n6:ZU

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 2784	2276	195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe	30
PID 2276 wrote to memory of 2784	2276	195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe	30
PID 2276 wrote to memory of 2784	2276	195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe	30

C:\Users\Admin\AppData\Local\Temp\195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe
"C:\Users\Admin\AppData\Local\Temp\195addef9de708ff8ee2b3db3e46786b1f57ac767865606b9b4586db9a1ffe6d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2276 -s 532
  2⤵
  PID:2784

memory/2276-0-0x000007FEF5BD3000-0x000007FEF5BD4000-memory.dmp

Filesize
4KB

Download
memory/2276-1-0x000000013F240000-0x000000013F38E000-memory.dmp

Filesize
1.3MB

Download
memory/2276-2-0x000007FEF5BD3000-0x000007FEF5BD4000-memory.dmp

Filesize
4KB

Download