53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da

Analysis

max time kernel
26s
max time network
31s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
04/07/2023, 20:18

Target

challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe
Size

36KB
MD5

1bfa9f9a15fc3f3a546587e227964664
SHA1

08f9c2d7e1a556db9a44c17dca013927a1ebe1a0
SHA256

53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da
SHA512

3870caacb0010690a4d31e2f51f27ac970302154da6858c2f94a965b209c3e8edc00c3118a6a39afcb110d689e7ae2bbad9a3feecd948a2f92e29f6f5864bfab
SSDEEP

768:uYem4LuzIPhSXBfv1FkkkstAfsr+Uf2hz:uvOIPhmBEkkaeY+UfU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1440	2312	WerFault.exe	28

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 1440	2312	challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe	29
PID 2312 wrote to memory of 1440	2312	challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe	29
PID 2312 wrote to memory of 1440	2312	challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe	29

C:\Users\Admin\AppData\Local\Temp\challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe
"C:\Users\Admin\AppData\Local\Temp\challange_Benign_53133b76a2bd0a9d8907828025a67b04206e626092fa278d3373f3a839da91da.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2312 -s 540
  2⤵
  - Program crash
  PID:1440

memory/2312-54-0x0000000000C60000-0x0000000000C6E000-memory.dmp

Filesize
56KB

Download