3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
21-11-2024 12:56

Target

3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe
Size

488KB
MD5

3384dab1af25456048333aa095b3f1d8
SHA1

9ec1725cb793a18bce199ff6b26124ca7df7bedc
SHA256

3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498
SHA512

759f8afaca6b4c11a3abc48850ff3d9824966d8c7c895fdcbd6eee963a3ea9a7fdeb7a7b117bb71339da932e517a50379d63f1b7c6a9d14fb23c6aab2447f26e
SSDEEP

12288:/wCorAbFPGwS0e3Qx4rH4smmTqMw3cq/:/wCVbFPGwf4JqT

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe

description	pid	process	target process
PID 564 wrote to memory of 2472	564	3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe	WerFault.exe
PID 564 wrote to memory of 2472	564	3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe	WerFault.exe
PID 564 wrote to memory of 2472	564	3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe
"C:\Users\Admin\AppData\Local\Temp\3be1435ea46a1c8d1fbc8f91b325b46d19268def95548c482384927b9928a498.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:564
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 564 -s 600
  2⤵
  PID:2472

memory/564-0-0x000007FEF6BB3000-0x000007FEF6BB4000-memory.dmp

Filesize
4KB

Download
memory/564-1-0x00000000008E0000-0x0000000000960000-memory.dmp

Filesize
512KB

Download
memory/564-2-0x000007FEF6BB0000-0x000007FEF759C000-memory.dmp

Filesize
9.9MB

Download
memory/564-3-0x0000000000260000-0x00000000002BC000-memory.dmp

Filesize
368KB

Download
memory/564-4-0x000007FEF6BB0000-0x000007FEF759C000-memory.dmp

Filesize
9.9MB

Download