8d022a2eb23de6c1a15af83b3dbb51598e121e8488a1a4c1341e3296857c20c8

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
01-09-2024 06:13

Target

x360ce/x360ce.exe
Size

162KB
MD5

d50289d1ba4b88774309b4ca8ee10ea4
SHA1

b88976f789650c10922c665386ab929c5bf45728
SHA256

ed6c4a4dabead55eff566e48c9d67865a18fdf90871119b9011f9db523a67d8f
SHA512

9d682961c698328e545a6fca2b50d6acd33389aca4d8e4b8ee2f24bea7598117b763c8b287e62804e0e4660042d9573150c969dbd651414e62ad32568e877c2f
SSDEEP

3072:3brZEFa/cwLLd85Ml1hL8nIwbAC1LwcEQkQkLY9nvu1Tno6vG2hwCxXdbqYun6L:3bx/caLd854qn9ECFwcEQWCUTnooG27B

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

x360ce.exe

description	pid	process	target process
PID 2352 wrote to memory of 1800	2352	x360ce.exe	WerFault.exe
PID 2352 wrote to memory of 1800	2352	x360ce.exe	WerFault.exe
PID 2352 wrote to memory of 1800	2352	x360ce.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\x360ce\x360ce.exe
"C:\Users\Admin\AppData\Local\Temp\x360ce\x360ce.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2352 -s 516
2⤵
PID:1800

memory/2352-0-0x000007FEF5CF3000-0x000007FEF5CF4000-memory.dmp

Filesize
4KB

Download
memory/2352-1-0x000000013FED0000-0x000000013FEFA000-memory.dmp

Filesize
168KB

Download
memory/2352-2-0x000007FEF5CF3000-0x000007FEF5CF4000-memory.dmp

Filesize
4KB

Download