71556ec1bd2f73b26f1b8dff2c76891500220b38768defa004a264ff2420951a

Analysis

max time kernel
119s
max time network
141s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-12-2023 23:35

Target

19fe3141881dec9f327ebbbc2afed22a.exe
Size

312KB
MD5

19fe3141881dec9f327ebbbc2afed22a
SHA1

69c834bcfc0f998621a97a83b60ae5f7ca1377ca
SHA256

71556ec1bd2f73b26f1b8dff2c76891500220b38768defa004a264ff2420951a
SHA512

6022212e596a2142944b0f68a76aad7e6f0072104b8019b700dc5225ef5e7d2b6f2803cb5d2f50ce750cfc3dcbd2783dbcfe31d163ae8e0e7cef0df162f59d7c
SSDEEP

6144:i7n1eFNZfPo68fFGuPP0c1m9oBra7dEGaL5v/aON/dPureDsX0xhKSp7U3BcTf2j:i7n1YCfFtnLMG98/UZiO/dPureDs6hKx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1760	2156	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2156 wrote to memory of 1760	2156	19fe3141881dec9f327ebbbc2afed22a.exe	28
PID 2156 wrote to memory of 1760	2156	19fe3141881dec9f327ebbbc2afed22a.exe	28
PID 2156 wrote to memory of 1760	2156	19fe3141881dec9f327ebbbc2afed22a.exe	28
PID 2156 wrote to memory of 1760	2156	19fe3141881dec9f327ebbbc2afed22a.exe	28

C:\Users\Admin\AppData\Local\Temp\19fe3141881dec9f327ebbbc2afed22a.exe
"C:\Users\Admin\AppData\Local\Temp\19fe3141881dec9f327ebbbc2afed22a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 36
  2⤵
  - Program crash
  PID:1760

memory/2156-0-0x0000000000400000-0x00000000004AA000-memory.dmp

Filesize
680KB

Download