0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
28/08/2023, 23:20

Target

0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe
Size

5KB
MD5

444763076eec7753b9932ebcf47d41a2
SHA1

e28bfad41d1ce1d48640f636ec87352ea2f70883
SHA256

0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e
SHA512

6fa3d1d63cd038153685564be1d96538ea6654623a8512e09336d576d51ccbdcc51defc57b0054bd7bf01f6da94d80392b3cbab274e30a06d577f8ba0131cff0
SSDEEP

48:SmlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tKRuqSxp:vWLkFfNnOKYloIQ2pm2pbYSOxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2376	1744	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1744 wrote to memory of 2376	1744	0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe	28
PID 1744 wrote to memory of 2376	1744	0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe	28
PID 1744 wrote to memory of 2376	1744	0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe	28
PID 1744 wrote to memory of 2376	1744	0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe	28

C:\Users\Admin\AppData\Local\Temp\0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe
"C:\Users\Admin\AppData\Local\Temp\0ba8036a89bc27604c06e25072e9575b0cd37b7586c775c6ff0aecf46591752e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1744
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1744 -s 48
  2⤵
  - Program crash
  PID:2376