0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910

Analysis

max time kernel
18s
max time network
18s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
03/11/2024, 03:28

Target

0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe
Size

426KB
MD5

92366a90bbe3f2174fe8470bf892c020
SHA1

2cc32a7b9d783f5e6cfa5a89f38369edb097725b
SHA256

0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910
SHA512

f0818f8556adae183d71524f2c5ae3eb046546e81703d8a9c8e1273fb75f8eac860d7d9d05723007986c055b4a6754afb15d97279350d03b6ebf624dcf5e81e8
SSDEEP

6144:8Z5f30291xuMHlpw9wrvwewMdBtbIbd5xv6P/6CuCNJ0hOYk:8nk291kMHlpw6r4eL3IbxvoyClwzk

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 2184	2120	0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe	30
PID 2120 wrote to memory of 2184	2120	0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe	30
PID 2120 wrote to memory of 2184	2120	0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe	30

C:\Users\Admin\AppData\Local\Temp\0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe
"C:\Users\Admin\AppData\Local\Temp\0c61d76e942c07fe271de6501682f1828755bb2ecade11580b9312e8616a1910N.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2120 -s 76
  2⤵
  PID:2184