98bfdee619924aa393809b095ea560908b74dc3ba53283a2cdb5c29cfc5ba674

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 20:37

Target

3bc60f21555c460c86d172df6e79922f.exe
Size

39KB
MD5

3bc60f21555c460c86d172df6e79922f
SHA1

219ceb1cee3217c3217e449177350e78ae8a4811
SHA256

98bfdee619924aa393809b095ea560908b74dc3ba53283a2cdb5c29cfc5ba674
SHA512

1018a795cbaa12871d93e3bbb347e5697bed6d3d321ee3c341ba036c36dd38bb78735f714d2972d1d2dd157f51b1cae6bd593b0a25d8032906055a12787dff49
SSDEEP

768:qolrgnoqmMDeYtnGgh2K4Gh/jTz6O36wByXmbantS8YzXB:qoS7tB/jTPqwEmbYUFr

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1276	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1276	2236	3bc60f21555c460c86d172df6e79922f.exe	28
PID 2236 wrote to memory of 1276	2236	3bc60f21555c460c86d172df6e79922f.exe	28
PID 2236 wrote to memory of 1276	2236	3bc60f21555c460c86d172df6e79922f.exe	28
PID 2236 wrote to memory of 1276	2236	3bc60f21555c460c86d172df6e79922f.exe	28

C:\Users\Admin\AppData\Local\Temp\3bc60f21555c460c86d172df6e79922f.exe
"C:\Users\Admin\AppData\Local\Temp\3bc60f21555c460c86d172df6e79922f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 44
  2⤵
  - Program crash
  PID:1276

memory/2236-0-0x0000000000400000-0x000000000040B27D-memory.dmp

Filesize
44KB

Download