b5bce4ae39601521539f468189443a429a3f4c8515eff408c1a8f8a25cc98a46

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
17/08/2024, 09:30

Target

MantiWPF.exe
Size

8.1MB
MD5

73780dcf37dbcb490db26b686bb73357
SHA1

0ab15d77fd1c9e6eb8e90401bbaf0f84cae05a74
SHA256

b5bce4ae39601521539f468189443a429a3f4c8515eff408c1a8f8a25cc98a46
SHA512

7b9d3affcce6aa8b904c90457ad2316a0a9069d7caa2d397b414ffea9eaedd7f30fc21ad6662800a6775333b959756a2b1f348affc555dd2d586bd6f281f4940
SSDEEP

196608:5hJkgnjc4cRiEx8WJoKAM3NBfxEJcm3U:5/jjc43oJZAUBBmk

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 2412	2120	MantiWPF.exe	30
PID 2120 wrote to memory of 2412	2120	MantiWPF.exe	30
PID 2120 wrote to memory of 2412	2120	MantiWPF.exe	30

C:\Users\Admin\AppData\Local\Temp\MantiWPF.exe
"C:\Users\Admin\AppData\Local\Temp\MantiWPF.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2120 -s 840
  2⤵
  PID:2412

memory/2120-0-0x000007FEF5693000-0x000007FEF5694000-memory.dmp

Filesize
4KB

Download
memory/2120-1-0x0000000000C90000-0x00000000014B6000-memory.dmp

Filesize
8.1MB

Download
memory/2120-2-0x000000001C730000-0x000000001D146000-memory.dmp

Filesize
10.1MB

Download
memory/2120-3-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

Filesize
9.9MB

Download
memory/2120-6-0x0000000000870000-0x000000000087A000-memory.dmp

Filesize
40KB

Download
memory/2120-5-0x0000000000870000-0x000000000087A000-memory.dmp

Filesize
40KB

Download
memory/2120-4-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

Filesize
9.9MB

Download
memory/2120-7-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

Filesize
9.9MB

Download