75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
18/09/2023, 01:15

Target

75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe
Size

3.1MB
MD5

241ce051b1989f277750cafe93bf6a35
SHA1

10d6271d2d07d07a80a3e819744b341a9345bbc3
SHA256

75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c
SHA512

85f12b18a6662d09b19b784de586b75e41f69311cda63304c49d6f6802e1e01442e6786439f4e8860e58ac3c5440ab64f3bf15ce16ba387ac84a5fa1c1b832f1
SSDEEP

98304:fY1JVBB0n1Zm5x83qS1Qc2Ggw5L/BlEQbR0:f2L0nIx83PAw5L/L0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2860	2020	WerFault.exe	27

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe
2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2860	2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe	28
PID 2020 wrote to memory of 2860	2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe	28
PID 2020 wrote to memory of 2860	2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe	28
PID 2020 wrote to memory of 2860	2020	75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe	28

C:\Users\Admin\AppData\Local\Temp\75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe
"C:\Users\Admin\AppData\Local\Temp\75cf6f073914c4d9774cf76be7b08be33476ba4c631a0486cdfaaee3222a9e0c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2020 -s 288
  2⤵
  - Program crash
  PID:2860