715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
21/12/2024, 14:41

Target

715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe
Size

16KB
MD5

5cc733e3ff214a84d4f57e34815c32d1
SHA1

8b7505cf758c1eccf23b93b38c2da63adbda8f02
SHA256

715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413
SHA512

2a358bf8ffdc00bc0e614dc365d355d616edcc00cd19b50acee61055976fee9408c199636715a518cbfcb2cec5ee7fe351adc3831a4eed5965da54c3f5be02c2
SSDEEP

384:4x2bbBqcsjQFC8t+zFQ4f8LDa2QAH2QDWQNHZThtg:VqcsjQFzt+FfJ2KWtP2

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2748 wrote to memory of 2680	2748	715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe	32
PID 2748 wrote to memory of 2680	2748	715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe	32
PID 2748 wrote to memory of 2680	2748	715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe	32

C:\Users\Admin\AppData\Local\Temp\715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe
"C:\Users\Admin\AppData\Local\Temp\715d436535a6d655caa6e9b637131d91acce65a48ff347222f02c299367ec413.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2748
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2748 -s 532
  2⤵
  PID:2680

memory/2748-0-0x000007FEF58C3000-0x000007FEF58C4000-memory.dmp

Filesize
4KB

Download
memory/2748-1-0x0000000000280000-0x000000000028A000-memory.dmp

Filesize
40KB

Download