a0b0f4bd4eed86e1034de34a5b02be5235ef8da0b8d6804914abbd2b48b4667d

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
02/09/2023, 17:17

Target

2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe
Size

1.1MB
MD5

5920e603fe354a0dae1bbfb1a2a42a1a
SHA1

1f715c34255af3d7b917ecb30330e40dc9831024
SHA256

a0b0f4bd4eed86e1034de34a5b02be5235ef8da0b8d6804914abbd2b48b4667d
SHA512

2e577dbea76485ea0253a6a756dc8a4eae661832110ad5c70ee5a7cf8c2415a4676beaa33d40edd4950a153d2e7983f18e427c6991550ef0ce8af9eff082da34
SSDEEP

24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/XRPOO8WdHUq7:F0dwAYZt6C31WeTPRPOhWBUq7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1476	956	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 1476	956	2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe	28
PID 956 wrote to memory of 1476	956	2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe	28
PID 956 wrote to memory of 1476	956	2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe	28
PID 956 wrote to memory of 1476	956	2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-22_5920e603fe354a0dae1bbfb1a2a42a1a_stop_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 956 -s 192
  2⤵
  - Program crash
  PID:1476