de44f12d5b907cf5de360929b9d359aa75a4763ee4168336854f95051ae3bbc9

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22/04/2023, 00:27

Target

SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe
Size

36KB
MD5

bc7155d6025688a593035333417ce62c
SHA1

ec077a7e519aa603a5a8cb8a136cc7f5853c8136
SHA256

de44f12d5b907cf5de360929b9d359aa75a4763ee4168336854f95051ae3bbc9
SHA512

8ea1d995394f3e485fd2015b5c2376569a3891392f3f50ed444304c49d5946fcf8e4b743c1b7c0d911e153de562b0de92abc2751ed07ce366cc87df1a62ab040
SSDEEP

96:Y6E4Dg6n5fWi0+WWDNhWCutxkAWyxePgMZVJjS20jSB9/ZSPIT:RvDsTiNhWPtxkSEPgwZhgIT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1388	1728	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1728 wrote to memory of 1388	1728	SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe	28
PID 1728 wrote to memory of 1388	1728	SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe	28
PID 1728 wrote to memory of 1388	1728	SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe	28
PID 1728 wrote to memory of 1388	1728	SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe	28

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heuristic.HEUR.AGEN.1333029.12009.12205.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 36
  2⤵
  - Program crash
  PID:1388