93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
25/11/2023, 03:16

Target

93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe
Size

753KB
MD5

9a87364c37f43418dbf41f993d5c27f7
SHA1

2c1d4726fcacb06379ef396aea1a23c86d9a7bf6
SHA256

93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b
SHA512

26da0f8dc76e8b12e2c5414a9421de318922bc80347fc41597a4147bf0f309241053dfb7aca525d7607d16a03535a151695bb355a19fba6dce1dc620ddcadf76
SSDEEP

12288:iX4f0LXn6gy2JB4/q+3cjclijLWNQqLLBWifXLelTI7u0P8pkhp:eXvyb/q+sszNQqLtWiSlTI7u0Php

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2180	2512	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2512 wrote to memory of 2180	2512	93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe	28
PID 2512 wrote to memory of 2180	2512	93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe	28
PID 2512 wrote to memory of 2180	2512	93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe	28
PID 2512 wrote to memory of 2180	2512	93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe	28

C:\Users\Admin\AppData\Local\Temp\93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe
"C:\Users\Admin\AppData\Local\Temp\93b5d69741b52cca10c4bd8372cb79852baa08856c144d5167304ff031d77c3b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 116
  2⤵
  - Program crash
  PID:2180