e963b56e7dbdb9339a08a0bc7bd7d2183cafae59eea0ddbf2dc4ee5135886d1a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 23:12

Target

187e6194fc2c77208d25c4e3307ccacb.exe
Size

5KB
MD5

187e6194fc2c77208d25c4e3307ccacb
SHA1

acaef979756c5e874b97fe4680a50d31b9f952c8
SHA256

e963b56e7dbdb9339a08a0bc7bd7d2183cafae59eea0ddbf2dc4ee5135886d1a
SHA512

26561808d1b66d930ca9cd9734e09c6b12d78fcd0dbcf0a01a7fd74dc08332825630cd7e06c47d8341d4225ae2a53ea81e3821d99bc33003e5ed3ed186ad5638
SSDEEP

96:iylw/wzvFp2vr1P79thesjapbIta3Q8Oz3rOYhxLO2Voa+2vo/U3C6TrRx27:iyaOtp2D99theqapUtCqSYFVoa9vL3z2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2216	2316	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 2216	2316	187e6194fc2c77208d25c4e3307ccacb.exe	28
PID 2316 wrote to memory of 2216	2316	187e6194fc2c77208d25c4e3307ccacb.exe	28
PID 2316 wrote to memory of 2216	2316	187e6194fc2c77208d25c4e3307ccacb.exe	28
PID 2316 wrote to memory of 2216	2316	187e6194fc2c77208d25c4e3307ccacb.exe	28

C:\Users\Admin\AppData\Local\Temp\187e6194fc2c77208d25c4e3307ccacb.exe
"C:\Users\Admin\AppData\Local\Temp\187e6194fc2c77208d25c4e3307ccacb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 88
  2⤵
  - Program crash
  PID:2216

memory/2316-0-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download