3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a

Analysis

max time kernel
27s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
28-04-2023 12:12

Target

3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe
Size

1.2MB
MD5

2a0ebd9558115797d61b13be8e21c2a1
SHA1

34eff3cbbc161adefab45dea19e7b86163a5becb
SHA256

3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a
SHA512

240c610584f6a154f16413174fc981f8b7ac024a07635b9ca04aa28651b645bc143e62fdfd61c8b09277cfdcdae8bf6cec0da233059a11858adae6a38cfcfe4c
SSDEEP

24576:wpm8SSv+x5jS3XJP2zj5ELJVYdSVG1hDSDjsae3bJ7:KTVYEXV2/amza2V7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
924	1100	WerFault.exe	25

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1100 wrote to memory of 924	1100	3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe	26
PID 1100 wrote to memory of 924	1100	3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe	26
PID 1100 wrote to memory of 924	1100	3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe	26

C:\Users\Admin\AppData\Local\Temp\3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe
"C:\Users\Admin\AppData\Local\Temp\3b108c29fabd5754f55889b44cd02ea8bec6cd69709bc20f193fc2254bc97a7a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1100
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1100 -s 144
  2⤵
  - Program crash
  PID:924