270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-09-2023 11:16

Target

270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe
Size

1.6MB
MD5

6de3d334f093e5e98b8feaa7b5f7da6d
SHA1

263054124f2496dcee899be1e1e07ad8dfe34d1e
SHA256

270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9
SHA512

16f4c04d5cec1dbbe764eef29ab9ccc55824fe89af1cd6dea7a13f211b91332434ed5833726ce331c88f134625b80b0bfd7cb12c47085b493db51ceecb722d45
SSDEEP

24576:1cuQIWzErfPc16ijZmm6W6RE/VoTtnkW3tr6kTk/OTsyhDSVXT5XicHya:1cuO1rYm63RE/mYdORGXT5XicH1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1996	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 1996	2436	270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe	28
PID 2436 wrote to memory of 1996	2436	270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe	28
PID 2436 wrote to memory of 1996	2436	270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe	28

C:\Users\Admin\AppData\Local\Temp\270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe
"C:\Users\Admin\AppData\Local\Temp\270bdbb2904246ffdcc826ddab6ee175a0f407fbab027557db23163be7bbcec9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2436 -s 144
  2⤵
  - Program crash
  PID:1996