57fca6e2e32a57bace7dc42546d0ea5d8760680b351cac6f240baecae8f314c2

Analysis

max time kernel
141s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 11:21

Target

6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe
Size

21KB
MD5

6a63a391d8e00ccb4c1d9e8c42fc3fcc
SHA1

8dbc476332355bd731cc0e07f049c45886e028ef
SHA256

57fca6e2e32a57bace7dc42546d0ea5d8760680b351cac6f240baecae8f314c2
SHA512

b58a7c577def06754b55f2f05e710b3c3fbdae192c7819db1ddae5783a8b06e6a45a51c0ae040a62f93023aed8011fecc11794abf5da69e05b407b46ec7f1482
SSDEEP

384:XcY9H8nIZaPbUx7nLnkFPIOJej9o/8vWqCNsKlOszQ:XcY9HsMazOb7kFwOJeVeaZs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2656	2228	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2656	2228	6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe	28
PID 2228 wrote to memory of 2656	2228	6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe	28
PID 2228 wrote to memory of 2656	2228	6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe	28
PID 2228 wrote to memory of 2656	2228	6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe	28

C:\Users\Admin\AppData\Local\Temp\6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe
"C:\Users\Admin\AppData\Local\Temp\6a63a391d8e00ccb4c1d9e8c42fc3fcc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 88
  2⤵
  - Program crash
  PID:2656

memory/2228-0-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/2228-1-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download