77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 00:47

Target

77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe
Size

5KB
MD5

99563736ce0a10910f09a04ff8631072
SHA1

f4abe780af513e6747c277fc49d5d6678631ae56
SHA256

77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355
SHA512

51dec8d236f0e92acf0b6fdd646e87f20f2fe88b816ac3240ab02d4fd19fd2b7a51b23985a3d1f3ecf0e90f958f2d1d28a55c5bd841eb5bb197fb52aa5a7600b
SSDEEP

48:SOlYlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7twRuqSxp:PlAWLkFfNnOKYloIQ2pm2pbYSkxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	2096	WerFault.exe	13

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 2260	2096	77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe	28
PID 2096 wrote to memory of 2260	2096	77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe	28
PID 2096 wrote to memory of 2260	2096	77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe	28
PID 2096 wrote to memory of 2260	2096	77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe	28

C:\Users\Admin\AppData\Local\Temp\77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe
"C:\Users\Admin\AppData\Local\Temp\77b44ff054e8e3746a2aa108c514b2c691e90b2e570c1d3296e887e6b2810355.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2096
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2096 -s 48
  2⤵
  - Program crash
  PID:2260