73f33b19be2b7d07dd4c841846faad43ccdc701e002de8e048f08ef14339ca22

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 03:05

Target

01cd4a0e32c4b7eb948fa036346e2e88.exe
Size

392KB
MD5

01cd4a0e32c4b7eb948fa036346e2e88
SHA1

431aba14dfdffd2772bfe10afdb2aba5d0a84d10
SHA256

73f33b19be2b7d07dd4c841846faad43ccdc701e002de8e048f08ef14339ca22
SHA512

bab3e133b0a2b3d70c59a68bd8f8eb78be41bad69081f004c1fa6036c2edaa4019313880127ab77ae5907208bf15f56521be269e3d186a47bcc1b1be25da5127
SSDEEP

6144:NcLdRLMKro2mDK94uHjUgt7WiO7KQEiaNXcBJ/nzpzSC3Wbx2i+y6:I/gKro2OK94uXt78Ud+zB3WbQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2284	3036	WerFault.exe	27

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28
PID 3036 wrote to memory of 2284	3036	01cd4a0e32c4b7eb948fa036346e2e88.exe	28

C:\Users\Admin\AppData\Local\Temp\01cd4a0e32c4b7eb948fa036346e2e88.exe
"C:\Users\Admin\AppData\Local\Temp\01cd4a0e32c4b7eb948fa036346e2e88.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 260
  2⤵
  - Program crash
  PID:2284

memory/3036-0-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download
memory/3036-1-0x0000000000470000-0x00000000004D3000-memory.dmp

Filesize
396KB

Download
memory/3036-3-0x0000000000470000-0x00000000004D3000-memory.dmp

Filesize
396KB

Download
memory/3036-4-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download