9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a

Analysis

max time kernel
118s
max time network
134s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
05-10-2023 18:58

Target

9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe
Size

2.0MB
MD5

f6f9e9bbbf84bffca4c64b193ca9712e
SHA1

7bbaab4dd314d9beb875f31f697436ae20b41844
SHA256

9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a
SHA512

fdd9974c7f7a9f1e303598f41f632eb7647dd38713e7a6ec5433b436043a2631da0ec683a24ab0ed787f74da4e81d28102a6d4a1b06aedf801b63ac9bbcd2a37
SSDEEP

24576:zz1vPCFM0R74FoHqlG4d6FxE/4r2V1NNryCi6scK0oTWdT33ZitmUDm6N:zZPER71qlG4wFx2VXVscK0oKdTH4AUKU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2568	2428	WerFault.exe	14

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe
2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 2568	2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe	28
PID 2428 wrote to memory of 2568	2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe	28
PID 2428 wrote to memory of 2568	2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe	28
PID 2428 wrote to memory of 2568	2428	9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe	28

C:\Users\Admin\AppData\Local\Temp\9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe
"C:\Users\Admin\AppData\Local\Temp\9c62dbeb400d2d350377c0ae45b24fabdb962bdf86e06423850e7c2f014ef58a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2428 -s 308
  2⤵
  - Program crash
  PID:2568