5860dd05a15b968fe06fbffcc05d9594a6fe59380b68be38c4913c9fa4477397

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 16:43

Target

065a0eb9bd4230487e1febd207e94384.exe
Size

106KB
MD5

065a0eb9bd4230487e1febd207e94384
SHA1

b12c83690b9d9e2556377bc3d14f1de9cfc76759
SHA256

5860dd05a15b968fe06fbffcc05d9594a6fe59380b68be38c4913c9fa4477397
SHA512

18e999336b661e96b25ce6b116bd022ec8f53e157efccdaae8d2b0781180f8031b13ecbe4636b363908370f680ce7293cef068c67c348b02987f845a7e61064c
SSDEEP

1536:5+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZJ:5+FDzK71QkbstyJjCKICpC72s/mlaXJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1700	2236	WerFault.exe	15

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1700	2236	065a0eb9bd4230487e1febd207e94384.exe	28
PID 2236 wrote to memory of 1700	2236	065a0eb9bd4230487e1febd207e94384.exe	28
PID 2236 wrote to memory of 1700	2236	065a0eb9bd4230487e1febd207e94384.exe	28
PID 2236 wrote to memory of 1700	2236	065a0eb9bd4230487e1febd207e94384.exe	28

C:\Users\Admin\AppData\Local\Temp\065a0eb9bd4230487e1febd207e94384.exe
"C:\Users\Admin\AppData\Local\Temp\065a0eb9bd4230487e1febd207e94384.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 128
  2⤵
  - Program crash
  PID:1700

memory/2236-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/2236-1-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download