59a50bf1fb162be16f56c6c59a4e6f4b6a8b5a6697a46b77aec5f368601ae8dc

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 18:22

Target

342daf494c6ebc3d8eac6739c30a0ae4.exe
Size

452KB
MD5

342daf494c6ebc3d8eac6739c30a0ae4
SHA1

668164d94655b7bb17ec6d0461d69d6f24feb0a4
SHA256

59a50bf1fb162be16f56c6c59a4e6f4b6a8b5a6697a46b77aec5f368601ae8dc
SHA512

b6dc7f114662847ab72d4c36b49cdd494a1361c9dd0eb01271139c89fc4d8f18c32ce35e124db89f651283b90ee64877a667405822d821d1eb137c2fb07881c3
SSDEEP

6144:ydGX/q1lDLS7L9BIz4n7lFjXRY5wALXqo1jmUZxL6xQGQW8w:h/q1tu7L9BIz+bu3LXqs76l5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1756	2752	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2752	342daf494c6ebc3d8eac6739c30a0ae4.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28
PID 2752 wrote to memory of 1756	2752	342daf494c6ebc3d8eac6739c30a0ae4.exe	28

C:\Users\Admin\AppData\Local\Temp\342daf494c6ebc3d8eac6739c30a0ae4.exe
"C:\Users\Admin\AppData\Local\Temp\342daf494c6ebc3d8eac6739c30a0ae4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2752 -s 312
  2⤵
  - Program crash
  PID:1756

memory/2752-0-0x0000000000400000-0x0000000000476000-memory.dmp

Filesize
472KB

Download
memory/2752-1-0x0000000000230000-0x00000000002A6000-memory.dmp

Filesize
472KB

Download
memory/2752-2-0x0000000000400000-0x0000000000476000-memory.dmp

Filesize
472KB

Download