56c41c1339c85491286a7b07e80cf989ba83e5aee89a739080cbc9418945dd04

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 11:30

Target

1af26e2f1a7402481903926e4d180185.exe
Size

364KB
MD5

1af26e2f1a7402481903926e4d180185
SHA1

cc1a89e45f1889933434fe09da40f183dcdf7e4d
SHA256

56c41c1339c85491286a7b07e80cf989ba83e5aee89a739080cbc9418945dd04
SHA512

a899abe6c085cfe194e2e298c0e9c6dbf3ef897f20b1854e2e63825e0ab8401d05aa656b35a9826d6ff62f9197feab884ccf8a5fd2cc2a165e6de1d26c420651
SSDEEP

6144:MuoJ7Sp18AIfGDnfe7bVAjzhGcRoFEIkJHz50rhkC23CmRnstGeN:USIpGDnmBAjzcJFEVHF0rhkZSmRsL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2716	2748	WerFault.exe	26

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2748	1af26e2f1a7402481903926e4d180185.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2748 wrote to memory of 2716	2748	1af26e2f1a7402481903926e4d180185.exe	28
PID 2748 wrote to memory of 2716	2748	1af26e2f1a7402481903926e4d180185.exe	28
PID 2748 wrote to memory of 2716	2748	1af26e2f1a7402481903926e4d180185.exe	28
PID 2748 wrote to memory of 2716	2748	1af26e2f1a7402481903926e4d180185.exe	28

C:\Users\Admin\AppData\Local\Temp\1af26e2f1a7402481903926e4d180185.exe
"C:\Users\Admin\AppData\Local\Temp\1af26e2f1a7402481903926e4d180185.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2748
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 188
  2⤵
  - Program crash
  PID:2716