75f55952b0366be5ca541c5c35eb88c3aed878c96550ae587c6bdbe3a3a7153c

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 07:56

Target

1065839ee799a83ad73ebe8ad1bf2b11.exe
Size

190KB
MD5

1065839ee799a83ad73ebe8ad1bf2b11
SHA1

d4ca2d6a7dfbac168f02fa95e496aeab9610ece9
SHA256

75f55952b0366be5ca541c5c35eb88c3aed878c96550ae587c6bdbe3a3a7153c
SHA512

235eee88fa971250dfb95486047ebc5267658d97a181b18954fafa5b31936f659c60b26ed21dad2b63ccc26e0ea8192e9e0fb1dc6085101b845c00193f987af6
SSDEEP

3072:h7nD9XUFAyRoEki80dM7wbrSwAf4HAe3mpEDPlXes+E+cU5lBsrufSN5n:BnDCWyOZ+dJvDw4HAJED9l+H5lBly5n

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2008	2140	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2140 wrote to memory of 2008	2140	1065839ee799a83ad73ebe8ad1bf2b11.exe	12
PID 2140 wrote to memory of 2008	2140	1065839ee799a83ad73ebe8ad1bf2b11.exe	12
PID 2140 wrote to memory of 2008	2140	1065839ee799a83ad73ebe8ad1bf2b11.exe	12
PID 2140 wrote to memory of 2008	2140	1065839ee799a83ad73ebe8ad1bf2b11.exe	12

C:\Users\Admin\AppData\Local\Temp\1065839ee799a83ad73ebe8ad1bf2b11.exe
"C:\Users\Admin\AppData\Local\Temp\1065839ee799a83ad73ebe8ad1bf2b11.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 120
  2⤵
  - Program crash
  PID:2008