96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/08/2024, 01:38

Target

96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe
Size

292KB
MD5

10fd54c23f62111dc8d0825161c5952e
SHA1

c4e2c1ef99996185913a29c9d8901f765a84bfdc
SHA256

96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454
SHA512

9e93aed084898ca3e06f5e068cd40f5fd98e24498c33bb2fb4a47ea762b3cb81abff372451a35ff92b7c9d0549c40954c08cca6d9f197c534491f56002844175
SSDEEP

6144:Qj/oHbYaDjSaxM8ajbD89a0uGi0v4o72Bg5HuN2dRtCbn8qmjv/8g:QbMYASaxM8CUXDfvn+COcLkorkg

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2192	2136	96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe	31
PID 2136 wrote to memory of 2192	2136	96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe	31
PID 2136 wrote to memory of 2192	2136	96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe	31

C:\Users\Admin\AppData\Local\Temp\96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe
"C:\Users\Admin\AppData\Local\Temp\96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2136 -s 744
  2⤵
  PID:2192

memory/2136-0-0x000007FEF5C73000-0x000007FEF5C74000-memory.dmp

Filesize
4KB

Download
memory/2136-1-0x00000000008A0000-0x00000000008F0000-memory.dmp

Filesize
320KB

Download
memory/2136-2-0x0000000000410000-0x00000000004CA000-memory.dmp

Filesize
744KB

Download
memory/2136-3-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2136-4-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2136-5-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2136-6-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2136-7-0x000007FEF5C73000-0x000007FEF5C74000-memory.dmp

Filesize
4KB

Download
memory/2136-8-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download