dbec5fe8ec09ad73d4040efbc0318574d91a84fc2fe0d9656deabb7a5409a42d

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 07:32

Target

5cbeb522e741d7c8f3d9b46c271326cc.exe
Size

232KB
MD5

5cbeb522e741d7c8f3d9b46c271326cc
SHA1

09b54a532aa1a7fcaf809a647202ab66096eac80
SHA256

dbec5fe8ec09ad73d4040efbc0318574d91a84fc2fe0d9656deabb7a5409a42d
SHA512

34955cb4b2a54796af6186c40f6c27bf1225b826cd340ef14042aa1e146c59b5b7ddc23d0b2ec0d576bb2cbbf32fa58ee4b1363117db07b7872a66049080f5ea
SSDEEP

768:IfOhsjlTZdr+KGz5BAtpm4eutfrWTVtTZ/BliKG1jiTa9McTfkQ38ZS5p:ItfdS6pm4aTZ5XG1jiTa9McrkQMZSL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2360	2352	WerFault.exe	15

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2360	2352	5cbeb522e741d7c8f3d9b46c271326cc.exe	16
PID 2352 wrote to memory of 2360	2352	5cbeb522e741d7c8f3d9b46c271326cc.exe	16
PID 2352 wrote to memory of 2360	2352	5cbeb522e741d7c8f3d9b46c271326cc.exe	16
PID 2352 wrote to memory of 2360	2352	5cbeb522e741d7c8f3d9b46c271326cc.exe	16

C:\Users\Admin\AppData\Local\Temp\5cbeb522e741d7c8f3d9b46c271326cc.exe
"C:\Users\Admin\AppData\Local\Temp\5cbeb522e741d7c8f3d9b46c271326cc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 148
  2⤵
  - Program crash
  PID:2360

memory/2352-0-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download