bce21933957d982afe763bc4c8243b7bd9277922b6e889fc8055e1fb07d68cae

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 13:47

Target

22ed5de343753ed291a5a3dce9b8f547.exe
Size

1.3MB
MD5

22ed5de343753ed291a5a3dce9b8f547
SHA1

713d9350ed5b3cf3fcf4c4886754b9306adec67b
SHA256

bce21933957d982afe763bc4c8243b7bd9277922b6e889fc8055e1fb07d68cae
SHA512

3b1540a3da8fd1ed1b8c5092c9bd893f0cb52a1aeff5b75e5167583cd3e6eb1d7009b91007a703d43673d657521f9180ae6a82e5b7e6c492f7c951195f19bff8
SSDEEP

24576:Jy+KpPq9PdcVf4kr90NuoH+DqwZD8aCTNzowb8QrVaPp34W5:IgPCVflryQJD8acJRpaPpo0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2324	2176	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 2324	2176	22ed5de343753ed291a5a3dce9b8f547.exe	18
PID 2176 wrote to memory of 2324	2176	22ed5de343753ed291a5a3dce9b8f547.exe	18
PID 2176 wrote to memory of 2324	2176	22ed5de343753ed291a5a3dce9b8f547.exe	18
PID 2176 wrote to memory of 2324	2176	22ed5de343753ed291a5a3dce9b8f547.exe	18

C:\Users\Admin\AppData\Local\Temp\22ed5de343753ed291a5a3dce9b8f547.exe
"C:\Users\Admin\AppData\Local\Temp\22ed5de343753ed291a5a3dce9b8f547.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2176 -s 112
  2⤵
  - Program crash
  PID:2324

memory/2176-0-0x00000000003D0000-0x000000000051F000-memory.dmp

Filesize
1.3MB

Download