bb07726f228125d0a93d5982715707b7b95039a70a8785103a581d2e6887e172

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 11:59

Target

Orden de compra N3-13429.exe
Size

710KB
MD5

98f66b5b83cf6b73296ff5bec150d103
SHA1

3bfe4209569287f567e3fbd63982dbce2f8c231d
SHA256

72487654d06a0b791464085da985978d5c100cffc8439f8b3a9246bcbbb8c4e8
SHA512

26585d772eed8877450926f7c065dfbbad30eea7137667e552dc36569f71908b127c4c1880a16cff0451bd3ccaa02c9094337fd433c367b03c137cbccb2cc4fa
SSDEEP

12288:KIR5x+u6RfbWYCrt/22puGGh6abmMbvZwPO5ICGIb1L8idw0sDn2GVqgAlpoI/JM:I3WYatucdvRIb1I4ENZIh7vgt

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 1936	2296	Orden de compra N3-13429.exe	31
PID 2296 wrote to memory of 1936	2296	Orden de compra N3-13429.exe	31
PID 2296 wrote to memory of 1936	2296	Orden de compra N3-13429.exe	31

C:\Users\Admin\AppData\Local\Temp\Orden de compra N3-13429.exe
"C:\Users\Admin\AppData\Local\Temp\Orden de compra N3-13429.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2296 -s 28
  2⤵
  PID:1936