05c40307e014357fa26e69d4a062fdb7beba19fa8187c0e55fa0fd8f4731cd20

Analysis

max time kernel
4s
max time network
37s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 06:17

Target

0b087528d9d91292e4139952ad5ecd57.exe
Size

24KB
MD5

0b087528d9d91292e4139952ad5ecd57
SHA1

a1ef06eae380bb6ac3667b0ff5c58380203bfade
SHA256

05c40307e014357fa26e69d4a062fdb7beba19fa8187c0e55fa0fd8f4731cd20
SHA512

f1baf1fc7eb91a6b9083fa346a0530ed328358c6eedb5fbb63e40b722709a0da1f0ba5b0af6bc440b8314371a38aa8a02d0a4e913da5460bfbca8d8662a8da0e
SSDEEP

384:HGzaLUeYI97jMpVXQgDXnWbp6fydFQnFdWdz1mvZL/nWPcnAgvuf6:2aAY6/pDXnEp6fFadUNPWTeQ6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2548	2336	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 2548	2336	0b087528d9d91292e4139952ad5ecd57.exe	28
PID 2336 wrote to memory of 2548	2336	0b087528d9d91292e4139952ad5ecd57.exe	28
PID 2336 wrote to memory of 2548	2336	0b087528d9d91292e4139952ad5ecd57.exe	28
PID 2336 wrote to memory of 2548	2336	0b087528d9d91292e4139952ad5ecd57.exe	28

C:\Users\Admin\AppData\Local\Temp\0b087528d9d91292e4139952ad5ecd57.exe
"C:\Users\Admin\AppData\Local\Temp\0b087528d9d91292e4139952ad5ecd57.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 88
  2⤵
  - Program crash
  PID:2548

memory/2336-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download