7642c41c0a82c1c54cb06975194123f868e7c43b8f999b7f76d45147014b4cd0

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 02:48

Target

4dca03510b3c9ada3d6afb0992292fb4.exe
Size

124KB
MD5

4dca03510b3c9ada3d6afb0992292fb4
SHA1

79cfb9acabc035cdb3211bcf688801df598afd5c
SHA256

7642c41c0a82c1c54cb06975194123f868e7c43b8f999b7f76d45147014b4cd0
SHA512

f0f2182d593475d21cbe20af3440253eafd54d8279e12fcb46615d5eb77ca8d0a6080fba2426f249f4e55fb66f0aeeba92437770b71fd9973580936688890868
SSDEEP

1536:syRABerKT7IDBpI2BR9QF6zmaGuEljXwPzLFJOFfHYTosdD9FmmX6ndUEAejkTMB:sNecdYm/lULFefHYToUxF9jTM9nkk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	1988	WerFault.exe	13

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 2260	1988	4dca03510b3c9ada3d6afb0992292fb4.exe	28
PID 1988 wrote to memory of 2260	1988	4dca03510b3c9ada3d6afb0992292fb4.exe	28
PID 1988 wrote to memory of 2260	1988	4dca03510b3c9ada3d6afb0992292fb4.exe	28
PID 1988 wrote to memory of 2260	1988	4dca03510b3c9ada3d6afb0992292fb4.exe	28

C:\Users\Admin\AppData\Local\Temp\4dca03510b3c9ada3d6afb0992292fb4.exe
"C:\Users\Admin\AppData\Local\Temp\4dca03510b3c9ada3d6afb0992292fb4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1988 -s 152
  2⤵
  - Program crash
  PID:2260

memory/1988-0-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/1988-1-0x0000000000260000-0x0000000000262000-memory.dmp

Filesize
8KB

Download