5a57aee0a437584bc5bd756df0a185b43e188774c7a207cd340665e8bd35ad60

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 23:21

Target

1911976fdcebcdf395d0e67ed8e3c8b4.exe
Size

183KB
MD5

1911976fdcebcdf395d0e67ed8e3c8b4
SHA1

222b9e523014cbd12d5b9199d36a2abe3961bf21
SHA256

5a57aee0a437584bc5bd756df0a185b43e188774c7a207cd340665e8bd35ad60
SHA512

1ac54d0049f1db5a841303a82225cb146207a287ff50ec81d401cecf1b9c0c18e2e358d3760579b07bfce662ccb99c262712656e52cba82ee9c762d32791990f
SSDEEP

3072:EKBC5CH+xF7vCww95YeoLoSqtIzpeNyKBC5CH+xF7vCww95YeoLoSqtIzp:RBC564ubYe5td5BC564ubYe5t

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2520	700	WerFault.exe	1

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16
PID 700 wrote to memory of 2520	700	1911976fdcebcdf395d0e67ed8e3c8b4.exe	16

C:\Users\Admin\AppData\Local\Temp\1911976fdcebcdf395d0e67ed8e3c8b4.exe
"C:\Users\Admin\AppData\Local\Temp\1911976fdcebcdf395d0e67ed8e3c8b4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:700
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 700 -s 272
  2⤵
  - Program crash
  PID:2520

memory/700-3-0x0000000000260000-0x000000000029B000-memory.dmp

Filesize
236KB

Download
memory/700-2-0x0000000000260000-0x000000000029B000-memory.dmp

Filesize
236KB

Download
memory/700-0-0x0000000000AF0000-0x0000000000B2B000-memory.dmp

Filesize
236KB

Download
memory/700-4-0x0000000000AF0000-0x0000000000B2B000-memory.dmp

Filesize
236KB

Download