7dda349c2a22b613aa933e439de84815996be8783661da442e06bf68d3643299

Analysis

max time kernel
141s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 23:03

Target

17eb0929c46b211abfd75c69b95aef2c.exe
Size

75KB
MD5

17eb0929c46b211abfd75c69b95aef2c
SHA1

36d85b9f3beb6f71d2635c66f72c9f90d36956c4
SHA256

7dda349c2a22b613aa933e439de84815996be8783661da442e06bf68d3643299
SHA512

14d412b3147f5190e92fd5a96ebc0920fc33c5aac644758a90240ce8b3f4d210474459e89db5c7e5aec24a7d7d5a016aecdc5edf89a756ce5f4819e2b8815c52
SSDEEP

1536:aH3nw/vZGY2xum99LVolGVjSDBUDyZhVPNvXwaRdkNpTIiqWe7:W3n8ZGYUulGOB7JVvAaINNZM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2428	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2428	2436	17eb0929c46b211abfd75c69b95aef2c.exe	28
PID 2436 wrote to memory of 2428	2436	17eb0929c46b211abfd75c69b95aef2c.exe	28
PID 2436 wrote to memory of 2428	2436	17eb0929c46b211abfd75c69b95aef2c.exe	28
PID 2436 wrote to memory of 2428	2436	17eb0929c46b211abfd75c69b95aef2c.exe	28

C:\Users\Admin\AppData\Local\Temp\17eb0929c46b211abfd75c69b95aef2c.exe
"C:\Users\Admin\AppData\Local\Temp\17eb0929c46b211abfd75c69b95aef2c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 92
  2⤵
  - Program crash
  PID:2428

memory/2436-0-0x0000000000400000-0x0000000000626200-memory.dmp

Filesize
2.1MB

Download
memory/2436-1-0x0000000000400000-0x0000000000626200-memory.dmp

Filesize
2.1MB

Download