8e0897327149fc0f5839e47d27cf3cf99dee62376c3dcba1e05b2a3f68600d7e

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 08:03

Target

5e3a0c08bb29707d42918d6e74ce7773.exe
Size

278KB
MD5

5e3a0c08bb29707d42918d6e74ce7773
SHA1

3ac09251075cc14dff8269c05dd9f7a748ea2119
SHA256

8e0897327149fc0f5839e47d27cf3cf99dee62376c3dcba1e05b2a3f68600d7e
SHA512

8a70ad63601aadd97580b7945d30a6cd7078f59bdc384ac12541dc4163704f534a93747a2945abfb0226259851fab7f55b1e0923547ce28d4eb2ca8b89118b45
SSDEEP

1536:14j6GqqKUFA9WG6ZYa/p7qZUC8Bs4y3IQutjNi:KGhqKUeYjZj/p7qZABv0IQuxc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1456	2208	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 1456	2208	5e3a0c08bb29707d42918d6e74ce7773.exe	19
PID 2208 wrote to memory of 1456	2208	5e3a0c08bb29707d42918d6e74ce7773.exe	19
PID 2208 wrote to memory of 1456	2208	5e3a0c08bb29707d42918d6e74ce7773.exe	19
PID 2208 wrote to memory of 1456	2208	5e3a0c08bb29707d42918d6e74ce7773.exe	19

C:\Users\Admin\AppData\Local\Temp\5e3a0c08bb29707d42918d6e74ce7773.exe
"C:\Users\Admin\AppData\Local\Temp\5e3a0c08bb29707d42918d6e74ce7773.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2208 -s 36
  2⤵
  - Program crash
  PID:1456