8187f7b93254c5354830bae1e61e0c3a23d3a688b683fbfa7e8c355d1407d076

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 15:02

Target

02c1aca296085090b25e433a4b18c6cb.exe
Size

99KB
MD5

02c1aca296085090b25e433a4b18c6cb
SHA1

c35a62069f0bf061a0021d2c59f7ed8f53eac949
SHA256

8187f7b93254c5354830bae1e61e0c3a23d3a688b683fbfa7e8c355d1407d076
SHA512

280164ef4ac9113eb9ff9820b98fc98f402f19189d46e9404dcb0b57a4eabe3f65182a2e838d382ca1d10c92ba895304e1e4269d143f6ec2297db98d4f2ceead
SSDEEP

1536:4IhQ70sAbiF8qMPcLc9YIPsspsoQ6DNToL0pb49S84xae2h5fs:4z4Bbi+XF9/Psspsov51/80ae2Tf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2548	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2548	2436	02c1aca296085090b25e433a4b18c6cb.exe	28
PID 2436 wrote to memory of 2548	2436	02c1aca296085090b25e433a4b18c6cb.exe	28
PID 2436 wrote to memory of 2548	2436	02c1aca296085090b25e433a4b18c6cb.exe	28
PID 2436 wrote to memory of 2548	2436	02c1aca296085090b25e433a4b18c6cb.exe	28

C:\Users\Admin\AppData\Local\Temp\02c1aca296085090b25e433a4b18c6cb.exe
"C:\Users\Admin\AppData\Local\Temp\02c1aca296085090b25e433a4b18c6cb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 116
  2⤵
  - Program crash
  PID:2548

memory/2436-0-0x0000000000400000-0x000000000043C000-memory.dmp

Filesize
240KB

Download
memory/2436-1-0x0000000000400000-0x000000000043C000-memory.dmp

Filesize
240KB

Download