3cdc09f17a0271a17bd5e4c110a9c2399383208726d738b52717be7352a28389

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 13:00

Target

2064adaeb3f6a4f600b203671ee235be.exe
Size

206KB
MD5

2064adaeb3f6a4f600b203671ee235be
SHA1

2b486898015afc739d4b25fe4f7e7ac05589bf99
SHA256

3cdc09f17a0271a17bd5e4c110a9c2399383208726d738b52717be7352a28389
SHA512

a8c4fbc5234f2a5103d49a1006546e3ee8f9c8fd02051786513a6cbcb14d85c3394ed3358a14cd56649b1f8767ea984b04454687b3f762e0bd03f957a4f7b943
SSDEEP

3072:ZN5m8wsTamrGsflGIwHoZXn6U8etpXH7KpKG6XSmtgEjvmuMqM3c8hdY3:Z77ws+mrGk8toZXbNtpXHOpipXidY3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2504	2184	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2504	2184	2064adaeb3f6a4f600b203671ee235be.exe	28
PID 2184 wrote to memory of 2504	2184	2064adaeb3f6a4f600b203671ee235be.exe	28
PID 2184 wrote to memory of 2504	2184	2064adaeb3f6a4f600b203671ee235be.exe	28
PID 2184 wrote to memory of 2504	2184	2064adaeb3f6a4f600b203671ee235be.exe	28

C:\Users\Admin\AppData\Local\Temp\2064adaeb3f6a4f600b203671ee235be.exe
"C:\Users\Admin\AppData\Local\Temp\2064adaeb3f6a4f600b203671ee235be.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 124
  2⤵
  - Program crash
  PID:2504