87bfb7b01e816eb00d58406e114b3002d9319bef4a6aad77e9c4bb9bedc19e1a

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 03:16

Target

4f832950f951c94aa53ba820bee22be4.exe
Size

23KB
MD5

4f832950f951c94aa53ba820bee22be4
SHA1

dd3034f5921f1d8c08f1a9a2cafb5330977fd34d
SHA256

87bfb7b01e816eb00d58406e114b3002d9319bef4a6aad77e9c4bb9bedc19e1a
SHA512

8b0319fa16600a3eef65948bb296870bedf8c7c9f3a77e9d0473d4dcad3e25d69581fc527ed3d78ffabb226c4498ede14067cc4cb64f85b88fa00d8a3b947737
SSDEEP

192:Vq9G6DCNbk3fU81Mk+m7phNo+o1Ms21aErvfBGVeINh3qfDPRRRRRRRRRRRRRRRI:VqPClcUm+k3U21NrQeqOiwYjt

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2964	2952	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 2964	2952	4f832950f951c94aa53ba820bee22be4.exe	28
PID 2952 wrote to memory of 2964	2952	4f832950f951c94aa53ba820bee22be4.exe	28
PID 2952 wrote to memory of 2964	2952	4f832950f951c94aa53ba820bee22be4.exe	28
PID 2952 wrote to memory of 2964	2952	4f832950f951c94aa53ba820bee22be4.exe	28

C:\Users\Admin\AppData\Local\Temp\4f832950f951c94aa53ba820bee22be4.exe
"C:\Users\Admin\AppData\Local\Temp\4f832950f951c94aa53ba820bee22be4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2952 -s 92
  2⤵
  - Program crash
  PID:2964