dc1ac0dbfe9b9aedbded335cc862d8f6ccd9f29ff75c2db37d0f72297ce93b63

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 03:25

Target

50286b9613e1f2529fff417694aaf041.exe
Size

695KB
MD5

50286b9613e1f2529fff417694aaf041
SHA1

581179d25efdf1e7fc65c7cb9a6c2f4c1227c2d9
SHA256

dc1ac0dbfe9b9aedbded335cc862d8f6ccd9f29ff75c2db37d0f72297ce93b63
SHA512

c7ef4e8a0ebba4ad40d5e443e587832b71a116f03bb4f64c489a9498be81858d8b1816b76ece94f6ada067427606690e7f3ffa7678e5190680a21313ed07988d
SSDEEP

768:r1FrQT8UWFKjS0duZs7i8fo9FE5h1ERMc07GRwogIegTrU+UN9QSb:r16l9Y9FET1EllSogIegT49Qw

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2224	2204	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2224	2204	50286b9613e1f2529fff417694aaf041.exe	28
PID 2204 wrote to memory of 2224	2204	50286b9613e1f2529fff417694aaf041.exe	28
PID 2204 wrote to memory of 2224	2204	50286b9613e1f2529fff417694aaf041.exe	28
PID 2204 wrote to memory of 2224	2204	50286b9613e1f2529fff417694aaf041.exe	28

C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe
"C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 36
  2⤵
  - Program crash
  PID:2224