5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efc

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02/11/2024, 15:05

Target

5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe
Size

697KB
MD5

a84fd3ec3b1deaa78374a32f0e091a10
SHA1

9d1593c590afdfd6526c71e8035f1139cae373fd
SHA256

5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efc
SHA512

d64544b035c9bc46a4256736159700356fc6ba3c090de8d8f1b26528da864b0b6daf098a405163822d5e0e0b93d42f9c4847feb285b8f27095beb2e6d36025a7
SSDEEP

6144:lbHgFf0cUDe7WkrqYMMH8xWioVHQv4nldFiN+ihcy5/gt+xZRtiKzvzaOV3YaQ:lbHCfn6krqJMH8xWiEHQvoniNp5nIaQ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2716 wrote to memory of 1868	2716	5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe	30
PID 2716 wrote to memory of 1868	2716	5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe	30
PID 2716 wrote to memory of 1868	2716	5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe	30

C:\Users\Admin\AppData\Local\Temp\5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe
"C:\Users\Admin\AppData\Local\Temp\5fe851d376359330fb4ead0aa0312dd881b9c53466418da80272cd3ee3536efcN.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2716
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2716 -s 76
  2⤵
  PID:1868