bf28455f877a2145e3f8cbce03043bd2da1bbcf254554c825d0ca7ef44a3ac9e

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
04-11-2024 15:45

Target

Stake Predictor V 5.6/Stake.exe
Size

280KB
MD5

10f238a887ff1f11bedd1f0be61114f9
SHA1

72e46ce52458ed42c97a6d4166a91c7e32e50d76
SHA256

5681579f563c5bb1ad9fdde52af6a6b0f1814b5999173270a4c163f02804ade3
SHA512

95d178c485161f8ee023bb3b76075268d3b58eee17b82983b02415450c97b06da304e1f383a93c8c392817dd2c8ca465bb8aa5f03abdb32843c69cd9f7ec1d1b
SSDEEP

3072:/bkvC5Bs/mTfSfhFLTY6RBWsWDsvs5xgVqaQse/NXyHrenqYgn6+:/bkvC5ByAn1IsbgVYselXyHrYqpX

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2036	2056	Stake.exe	31
PID 2056 wrote to memory of 2036	2056	Stake.exe	31
PID 2056 wrote to memory of 2036	2056	Stake.exe	31

C:\Users\Admin\AppData\Local\Temp\Stake Predictor V 5.6\Stake.exe
"C:\Users\Admin\AppData\Local\Temp\Stake Predictor V 5.6\Stake.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2056 -s 516
  2⤵
  PID:2036

memory/2056-0-0x000007FEF60D3000-0x000007FEF60D4000-memory.dmp

Filesize
4KB

Download
memory/2056-1-0x000000013F5A0000-0x000000013F5E8000-memory.dmp

Filesize
288KB

Download