e63067986126c56eedd55b0bde4121d68b047c7919ecd23d96eae402b8dd4d70

Analysis

max time kernel
28s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
09/07/2023, 08:58

Target

a542c1209886c9exeexeexeex.exe
Size

179KB
MD5

a542c1209886c9751a51f7266934f386
SHA1

dfa04160a21b061e1c28d57a3195d65dc94a8e76
SHA256

e63067986126c56eedd55b0bde4121d68b047c7919ecd23d96eae402b8dd4d70
SHA512

1dea9ef9b0e6be3c5a1a5080c9281581e888bf107efa30c4bca7b4562d317a78316faa75a5a21a1bc79be6876d99e3a3ac7a50ac8d3aa5a777a2c7391ab422a7
SSDEEP

3072:by2jabqv/3+5PdGhIcGgDXBpbsiK3QyxxzcdbgDHx5RKGfBHJviqaztj4R+R7:by8ab+/+5odGmBpbU3QKY8Hx5UetJKk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2172	2272	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2172	2272	a542c1209886c9exeexeexeex.exe	29
PID 2272 wrote to memory of 2172	2272	a542c1209886c9exeexeexeex.exe	29
PID 2272 wrote to memory of 2172	2272	a542c1209886c9exeexeexeex.exe	29
PID 2272 wrote to memory of 2172	2272	a542c1209886c9exeexeexeex.exe	29

C:\Users\Admin\AppData\Local\Temp\a542c1209886c9exeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\a542c1209886c9exeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 164
  2⤵
  - Program crash
  PID:2172