8d022a2eb23de6c1a15af83b3dbb51598e121e8488a1a4c1341e3296857c20c8

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
01/09/2024, 06:13

Target
x360ce/x360ce.exe
Size 162KB
Sample240901-gy8w3stdkl
SHA256 ed6c4a4dabead55eff566e48c9d67865a18fdf90871119b9011f9db523a67d8f
MD5 d50289d1ba4b88774309b4ca8ee10ea4
SHA1 b88976f789650c10922c665386ab929c5bf45728
SHA512 9d682961c698328e545a6fca2b50d6acd33389aca4d8e4b8ee2f24bea7598117b763c8b287e62804e0e4660042d9573150c969dbd651414e62ad32568e877c2f
SSDEEP 3072:3brZEFa/cwLLd85Ml1hL8nIwbAC1LwcEQkQkLY9nvu1Tno6vG2hwCxXdbqYun6L:3bx/caLd854qn9ECFwcEQWCUTnooG27B
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 1800	2352	x360ce.exe	30
PID 2352 wrote to memory of 1800	2352	x360ce.exe	30
PID 2352 wrote to memory of 1800	2352	x360ce.exe	30

C:\Users\Admin\AppData\Local\Temp\x360ce\x360ce.exe
"C:\Users\Admin\AppData\Local\Temp\x360ce\x360ce.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2352 -s 516
  2⤵
  PID:1800

memory/2352-0-0x000007FEF5CF3000-0x000007FEF5CF4000-memory.dmp

Download

memory/2352-1-0x000000013FED0000-0x000000013FEFA000-memory.dmp

Download

memory/2352-2-0x000007FEF5CF3000-0x000007FEF5CF4000-memory.dmp

Download