58955aec0f374630d7bf2ed72ded8cf1bd7aeb57ba4bbd51256cfb0b7049f971

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 01:31

Target

497d5e6302e3902982026e0a6d6f1ac4.exe
Size

367KB
MD5

497d5e6302e3902982026e0a6d6f1ac4
SHA1

e072e805bae1bdad51390a35f39a5582a760d173
SHA256

58955aec0f374630d7bf2ed72ded8cf1bd7aeb57ba4bbd51256cfb0b7049f971
SHA512

288d6dabd20327983f2b5e32a1b07bc77ccc0f1e6af9a92575127203c1349c243860ef56ef7d5c3e89327fcb3d2c3de0fbf6bafc74ed67480c2ee350b29f32b8
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+6:rTAOm5eyUnJmCzAXTzJR3RvK6lCw6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2468	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2468	2360	497d5e6302e3902982026e0a6d6f1ac4.exe	28
PID 2360 wrote to memory of 2468	2360	497d5e6302e3902982026e0a6d6f1ac4.exe	28
PID 2360 wrote to memory of 2468	2360	497d5e6302e3902982026e0a6d6f1ac4.exe	28
PID 2360 wrote to memory of 2468	2360	497d5e6302e3902982026e0a6d6f1ac4.exe	28

C:\Users\Admin\AppData\Local\Temp\497d5e6302e3902982026e0a6d6f1ac4.exe
"C:\Users\Admin\AppData\Local\Temp\497d5e6302e3902982026e0a6d6f1ac4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 116
  2⤵
  - Program crash
  PID:2468

memory/2360-0-0x0000000000BD0000-0x0000000000C30000-memory.dmp

Filesize
384KB

Download