11a56bb7973610d24942bf0edc4a061315dc1961e314ddb0cf3625db77850530

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 19:49

Target

3935d0dc621c3f33f68cf2c5fc87200c.exe
Size

422KB
MD5

3935d0dc621c3f33f68cf2c5fc87200c
SHA1

3fa513366c513e30c7388de30ec799a8abd09549
SHA256

11a56bb7973610d24942bf0edc4a061315dc1961e314ddb0cf3625db77850530
SHA512

11e02466302fe320ce32097cd8a3602fd7a6c7593d23c7d72a4d559ea4a444ec66b535482e622ca6f591431ad29fd32d0ed27d04cd21892735b75c302f4bab83
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIk:ysHU7+h5yeilykkln0PzZBqIk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1664	2140	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2140 wrote to memory of 1664	2140	3935d0dc621c3f33f68cf2c5fc87200c.exe	28
PID 2140 wrote to memory of 1664	2140	3935d0dc621c3f33f68cf2c5fc87200c.exe	28
PID 2140 wrote to memory of 1664	2140	3935d0dc621c3f33f68cf2c5fc87200c.exe	28
PID 2140 wrote to memory of 1664	2140	3935d0dc621c3f33f68cf2c5fc87200c.exe	28

C:\Users\Admin\AppData\Local\Temp\3935d0dc621c3f33f68cf2c5fc87200c.exe
"C:\Users\Admin\AppData\Local\Temp\3935d0dc621c3f33f68cf2c5fc87200c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 116
  2⤵
  - Program crash
  PID:1664

memory/2140-0-0x0000000000F50000-0x0000000000FBD000-memory.dmp

Filesize
436KB

Download