cb70a17dda0c1e725498147c1811e32300abb828c4345681554fc30e48773800

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 15:48

Target

2a84eea4bbd24ad0ae9ca731158a00e4.exe
Size

120KB
MD5

2a84eea4bbd24ad0ae9ca731158a00e4
SHA1

cd3a2edcdef07b780830fde297e19aa11dab4755
SHA256

cb70a17dda0c1e725498147c1811e32300abb828c4345681554fc30e48773800
SHA512

a4895aa4a606639b98afd77c8c79550fb9343ac6be3ac60475623b65a2014227ab1d51923fe1daea55d012fab1f19d0aac56d5562e30375caf4edc88947af489
SSDEEP

768:s5waKueOat1YV3e7FYG84iaO0xzWrtR3r5waKueGPgiAoQIAL9aTXdldpOh5Jkge:s5161YVOZ+70xqBx51r2kAE2Xk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2372	2304	WerFault.exe	13

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16
PID 2304 wrote to memory of 2372	2304	2a84eea4bbd24ad0ae9ca731158a00e4.exe	16

C:\Users\Admin\AppData\Local\Temp\2a84eea4bbd24ad0ae9ca731158a00e4.exe
"C:\Users\Admin\AppData\Local\Temp\2a84eea4bbd24ad0ae9ca731158a00e4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 252
  2⤵
  - Program crash
  PID:2372