58cb5f324f551534a098f57519e06a5f27bec94345188c643e98534101c0f1d5

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:59

Target

123a94e7f44b163901edbe6549523776.exe
Size

83KB
MD5

123a94e7f44b163901edbe6549523776
SHA1

d2a0fe5717b5b0442251318a9136b08a5b7f5000
SHA256

58cb5f324f551534a098f57519e06a5f27bec94345188c643e98534101c0f1d5
SHA512

2d1880ffcd449b27b7b670c4701cb36257e117c5a629a4b9d06fd594e0fb12ea1b5b3c11b7cf8ae39863ca5cf5416b6d0ac918468c1e2556996352da5cc271b3
SSDEEP

1536:aZGeXHRrd392uSSA/N+dL8d8VKHfJCu8JrfpjVrs2ryrd1vUQuqnqI6:atXHEpnN+Y88HVWrfHs2q

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
2268	2248	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2268	2248	123a94e7f44b163901edbe6549523776.exe	16
PID 2248 wrote to memory of 2268	2248	123a94e7f44b163901edbe6549523776.exe	16
PID 2248 wrote to memory of 2268	2248	123a94e7f44b163901edbe6549523776.exe	16
PID 2248 wrote to memory of 2268	2248	123a94e7f44b163901edbe6549523776.exe	16

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 36
1⤵
- Program crash
PID:2268

C:\Users\Admin\AppData\Local\Temp\123a94e7f44b163901edbe6549523776.exe
"C:\Users\Admin\AppData\Local\Temp\123a94e7f44b163901edbe6549523776.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248

memory/2248-0-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download