060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
13/11/2023, 21:55

Target

060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe
Size

5KB
MD5

e67bd852a5e7ef0fbedd4e77d1916bd2
SHA1

97ff996fa3dcc22e1816da445cdb957e0a0d385b
SHA256

060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059
SHA512

ce0f3d7ae6d8b7074fdeaf55482b43dfabd1cde67d54f5a0aca227341f8a6472b95270669026a80aa9408d010fa8e084564f3aaca15c31faf660992ab1ed5659
SSDEEP

48:SPlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t0RuqSxp:sWLkFfNnOKYloIQ2pm2pbYSgxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	1984	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1984 wrote to memory of 2260	1984	060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe	28
PID 1984 wrote to memory of 2260	1984	060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe	28
PID 1984 wrote to memory of 2260	1984	060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe	28
PID 1984 wrote to memory of 2260	1984	060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe	28

C:\Users\Admin\AppData\Local\Temp\060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe
"C:\Users\Admin\AppData\Local\Temp\060b48d084fe02e59d0cffeb955706ad4da2d8a70d3485d1664b8f1d6e935059.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1984 -s 48
  2⤵
  - Program crash
  PID:2260