cb715cd52fe966a6ceeeee923ff4fe0eb31d292de545a185230a05216fa6c8bc

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 05:13

Target

071ade1e08c0196111788d86189e6033.exe
Size

71KB
MD5

071ade1e08c0196111788d86189e6033
SHA1

f1d0aafcc0f4c35c4e211b1fa8b5d7817fe2b49d
SHA256

cb715cd52fe966a6ceeeee923ff4fe0eb31d292de545a185230a05216fa6c8bc
SHA512

0f9f033abb84b9229cefe1b7b23068612cd8a7f4f1f3de54d6862ebd79ec639ef6da5a426bfa20e4044dcf26234ed09b7a4e7360b6594eb66e3e330ff9891e9a
SSDEEP

1536:6zgvOyds3m+ne4a+7RpBRPi+aYa0MYQTaa2d1ln3:6zgvONe4B7RpBRPi+akrAaa2Nn3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2192	1868	WerFault.exe	1

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1868	071ade1e08c0196111788d86189e6033.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1868 wrote to memory of 2192	1868	071ade1e08c0196111788d86189e6033.exe	20
PID 1868 wrote to memory of 2192	1868	071ade1e08c0196111788d86189e6033.exe	20
PID 1868 wrote to memory of 2192	1868	071ade1e08c0196111788d86189e6033.exe	20
PID 1868 wrote to memory of 2192	1868	071ade1e08c0196111788d86189e6033.exe	20

C:\Users\Admin\AppData\Local\Temp\071ade1e08c0196111788d86189e6033.exe
"C:\Users\Admin\AppData\Local\Temp\071ade1e08c0196111788d86189e6033.exe"
1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:1868
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1868 -s 104
  2⤵
  - Program crash
  PID:2192

memory/1868-0-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download
memory/1868-1-0x0000000017180000-0x0000000017192000-memory.dmp

Filesize
72KB

Download
memory/1868-5-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/1868-4-0x0000000000220000-0x0000000000231000-memory.dmp

Filesize
68KB

Download
memory/1868-2-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download