e43b35d4b575708a3ebc1b183a8040f6311d1881b7b736bfb1e0f5e05905d49f

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 06:09

Target

58ae33cbabd983ac7b94c879085f310c.exe
Size

308KB
MD5

58ae33cbabd983ac7b94c879085f310c
SHA1

174788a6731ee9f254818c1c2bad9ec414c5c341
SHA256

e43b35d4b575708a3ebc1b183a8040f6311d1881b7b736bfb1e0f5e05905d49f
SHA512

09d069d35c41046414ab7cad063f9a13b4f07114b87feb9b182a2c4b93d6376b8b3f560ff156d1bf159800ac4ec7fbf07185e024397bb90ffdd85db97e4948aa
SSDEEP

6144:WaUXwC2dPLiBNh0z2ZzCfnTvdEc6kyF4WWwHbtY4vCGGvY:WaRPo62ZMhEuWWw64vU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2448	2100	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 2448	2100	58ae33cbabd983ac7b94c879085f310c.exe	27
PID 2100 wrote to memory of 2448	2100	58ae33cbabd983ac7b94c879085f310c.exe	27
PID 2100 wrote to memory of 2448	2100	58ae33cbabd983ac7b94c879085f310c.exe	27
PID 2100 wrote to memory of 2448	2100	58ae33cbabd983ac7b94c879085f310c.exe	27

C:\Users\Admin\AppData\Local\Temp\58ae33cbabd983ac7b94c879085f310c.exe
"C:\Users\Admin\AppData\Local\Temp\58ae33cbabd983ac7b94c879085f310c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 180
  2⤵
  - Program crash
  PID:2448

memory/2100-0-0x0000000000400000-0x0000000000451000-memory.dmp

Filesize
324KB

Download