61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8

Analysis

max time kernel
117s
max time network
140s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
20/09/2023, 12:25

Target

61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe
Size

113KB
MD5

b4506614c979c21f4798fafc6c262b19
SHA1

55ea3f52535f7f7860b13e873da1920f96dbf942
SHA256

61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8
SHA512

499cc783b9e87e2113d61e0c1ba9b64861a4706e743d567e5f4e07dc57b1b02f8fa9c999571ea0c721930511ea33f67de8f6c8dc51a9ede2c15bf414b86e4603
SSDEEP

1536:ZiinKRUU2csfWQ42ZRsy/sJ1GYrcSTwnQOG4N3guze0DzzzzzzzzzzzGK/Dzzzz/:ZiDRUU2Jv/ZIJ1ZN0nQUzf2S2R2v

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2732	2568	WerFault.exe	19

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2568 wrote to memory of 2732	2568	61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe	30
PID 2568 wrote to memory of 2732	2568	61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe	30
PID 2568 wrote to memory of 2732	2568	61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe	30
PID 2568 wrote to memory of 2732	2568	61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe	30

C:\Users\Admin\AppData\Local\Temp\61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe
"C:\Users\Admin\AppData\Local\Temp\61f825fb7c93452698ee459b001fcf3107ded68803600246707cabaf677b76f8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2568
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2568 -s 632
  2⤵
  - Program crash
  PID:2732

memory/2568-0-0x0000000074430000-0x0000000074B1E000-memory.dmp

Filesize
6.9MB

Download
memory/2568-1-0x0000000000F10000-0x0000000000F32000-memory.dmp

Filesize
136KB

Download
memory/2568-2-0x0000000074430000-0x0000000074B1E000-memory.dmp

Filesize
6.9MB

Download
memory/2568-3-0x00000000004E0000-0x0000000000520000-memory.dmp

Filesize
256KB

Download
memory/2568-4-0x00000000004E0000-0x0000000000520000-memory.dmp

Filesize
256KB

Download