cb707e0c3f3e23d936f9ef5d6b1f9ae35b29041d985c7d734df63377e2859dbf

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 14:00

Target

23c69f0474b0fd431aa4e07071061fa7.exe
Size

181KB
MD5

23c69f0474b0fd431aa4e07071061fa7
SHA1

a858e06999387cd1a0c9d21e669dd8d881aa96cb
SHA256

cb707e0c3f3e23d936f9ef5d6b1f9ae35b29041d985c7d734df63377e2859dbf
SHA512

da936e7593cbd959a4167c0e80a0d0a825def8739f37319c3686663f31401735996170519fd681fc357f05450ded7c5035a468c3a5b71ce64e6ff3b25e30f1bb
SSDEEP

1536:2VK4QCx9VnO9WH65njVfOiiwE3ZiV2MKqq0H0oLxq+ByUrL0n3gKICt5KtiGIHOK:IVDV2NdXiwE3AV11l0qq+FrLw3Dth

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2004	2476	WerFault.exe	24

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 2004	2476	23c69f0474b0fd431aa4e07071061fa7.exe	28
PID 2476 wrote to memory of 2004	2476	23c69f0474b0fd431aa4e07071061fa7.exe	28
PID 2476 wrote to memory of 2004	2476	23c69f0474b0fd431aa4e07071061fa7.exe	28
PID 2476 wrote to memory of 2004	2476	23c69f0474b0fd431aa4e07071061fa7.exe	28

C:\Users\Admin\AppData\Local\Temp\23c69f0474b0fd431aa4e07071061fa7.exe
"C:\Users\Admin\AppData\Local\Temp\23c69f0474b0fd431aa4e07071061fa7.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2476 -s 88
  2⤵
  - Program crash
  PID:2004