c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4a

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
09-11-2024 18:54

Target

c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe
Size

669KB
MD5

35d5279b562310a5fc2665c152e04320
SHA1

862f68c1ef0b3bbeb50967b12ee6aed426441a8f
SHA256

c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4a
SHA512

1771d6bf8726b20f02e96187c78e4ff16564e591d9610cde98b3853b7f2c71c619e46deb7727f27bd81656acc20d374561db2277c000836a6b3df4ec932a11f7
SSDEEP

6144:xwrGnfIRzRSPpwMHjH4ZGL3O0b83ii96AMaJB8udk4+xZRtiKzvzaOLVYi:xAGwtRSPuMHjH0GL3OB3x6Faa6i

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe

description	pid	process	target process
PID 2372 wrote to memory of 1824	2372	c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe	WerFault.exe
PID 2372 wrote to memory of 1824	2372	c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe	WerFault.exe
PID 2372 wrote to memory of 1824	2372	c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe
"C:\Users\Admin\AppData\Local\Temp\c932367dfe3c5e0c0c40c61852a568175956c8207abc1a9d1397aa163f0f5d4aN.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2372 -s 76
  2⤵
  PID:1824