442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928

Analysis

max time kernel
15s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21/08/2024, 10:11

Target

442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe
Size

1012KB
MD5

55814557bfc6685e517304c4ea52a5c2
SHA1

8a57b789c2a67b2f371b9b30bccf4545f60f6e23
SHA256

442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928
SHA512

80fc102f21aaf304fdb33e3eb3e4318541f3e70c14b8a95a2455284d0f294522ad888178556d785cf2e28a622a11c1921add64087a309b8a6dc551bde505b1cd
SSDEEP

12288:RKWutRvP9f55k285170PlvGpv4B5UemwOKCNyx5ZMDooZp6nHB3Ld6ettCFoEc9W:RK7RHX5xiKvGdgWZ2sZEx6eckhS

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2552 wrote to memory of 1724	2552	442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe	29
PID 2552 wrote to memory of 1724	2552	442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe	29
PID 2552 wrote to memory of 1724	2552	442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe	29

C:\Users\Admin\AppData\Local\Temp\442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe
"C:\Users\Admin\AppData\Local\Temp\442e91cc6ce49f245c3580c3b1b073466c83ea954239c0440ea5704796356928.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2552
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2552 -s 628
  2⤵
  PID:1724

memory/2552-0-0x000007FEF5F03000-0x000007FEF5F04000-memory.dmp

Filesize
4KB

Download
memory/2552-1-0x0000000000B00000-0x0000000000C00000-memory.dmp

Filesize
1024KB

Download
memory/2552-2-0x000007FEF5F00000-0x000007FEF68EC000-memory.dmp

Filesize
9.9MB

Download
memory/2552-3-0x0000000000710000-0x0000000000734000-memory.dmp

Filesize
144KB

Download
memory/2552-4-0x000007FEF5F03000-0x000007FEF5F04000-memory.dmp

Filesize
4KB

Download
memory/2552-5-0x000007FEF5F00000-0x000007FEF68EC000-memory.dmp

Filesize
9.9MB

Download
memory/2552-6-0x00000000024B0000-0x00000000024C6000-memory.dmp

Filesize
88KB

Download
memory/2552-7-0x00000000024D0000-0x00000000024E4000-memory.dmp

Filesize
80KB

Download