dd2c2061803d48e308dffa28fd1fa2de7993e31b2b5fa0ce24bc6340670e15e7

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
23/09/2023, 15:15

Target

74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe
Size

59KB
MD5

74d67cf6c36a39ef3afc65f0be7bfa90
SHA1

6611d494ca35ac8c2bc960dc0e3339bab5e36d2a
SHA256

dd2c2061803d48e308dffa28fd1fa2de7993e31b2b5fa0ce24bc6340670e15e7
SHA512

7dcb2a52907cb8f93e35b74ddae6c86f7e392376c964fa48c4ba2c6e11c8334e2ac9609f404dd73d185a70657968dbf84e03ab43a1c117a1b099cf5cc5fff7d0
SSDEEP

1536:QZUS2ijricj6kVoxoDixEspkUkcJqsmz2NpK24N3EQ/6KKOnFryKOZ83h:WQqSesWr1smqNpKTaxc5yKmKh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2092	2088	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2092	2088	74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe	28
PID 2088 wrote to memory of 2092	2088	74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe	28
PID 2088 wrote to memory of 2092	2088	74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe	28
PID 2088 wrote to memory of 2092	2088	74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe
"C:\Users\Admin\AppData\Local\Temp\74d67cf6c36a39ef3afc65f0be7bfa90_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2088 -s 36
  2⤵
  - Program crash
  PID:2092

memory/2088-0-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/2088-1-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download