47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 05:14

Target

47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe
Size

176KB
MD5

dcbf3df6ad71fc605e9eed821e5b27d0
SHA1

2fcbcec7392787df96fea1b1092697aee6852a52
SHA256

47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82
SHA512

6d3acc89344fc857c82e90d4183be25d7886e464c317f50e6e25f1dafbee9f53875f297a5507c8f45a865226dc40395a75730480bbbdb95a9fbeab1da39e2004
SSDEEP

3072:ylGoYoyWMxM0Z73ClEHxARI+gbEP06/E2UtZEOUk2gUYpG0jATZrkjSfpsGau4y:ySBM0J3gEAR7gVaUtZEpngPjIZrkY3a

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2520 wrote to memory of 2360	2520	47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe	30
PID 2520 wrote to memory of 2360	2520	47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe	30
PID 2520 wrote to memory of 2360	2520	47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe	30

C:\Users\Admin\AppData\Local\Temp\47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe
"C:\Users\Admin\AppData\Local\Temp\47abb445e8a6d15b8c9d1aaa2fab23e6ceca471c392ad6c89536cf3776a5df82N.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2520
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2520 -s 672
  2⤵
  PID:2360

memory/2520-0-0x000007FEF6113000-0x000007FEF6114000-memory.dmp

Filesize
4KB

Download
memory/2520-1-0x000000013F030000-0x000000013F060000-memory.dmp

Filesize
192KB

Download
memory/2520-2-0x0000000000870000-0x00000000008AE000-memory.dmp

Filesize
248KB

Download
memory/2520-3-0x00000000006C0000-0x00000000006C6000-memory.dmp

Filesize
24KB

Download
memory/2520-4-0x000007FEF6110000-0x000007FEF6AFC000-memory.dmp

Filesize
9.9MB

Download
memory/2520-5-0x000007FEF6113000-0x000007FEF6114000-memory.dmp

Filesize
4KB

Download
memory/2520-6-0x000007FEF6110000-0x000007FEF6AFC000-memory.dmp

Filesize
9.9MB

Download