7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6

Analysis

max time kernel
52s
max time network
79s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 11:26

Target

7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
Size

88KB
MD5

7665528dc374c532e998fcd4a1df8fea
SHA1

c1770c0bb2da037e8beac512f089e1a7f16ebcf7
SHA256

7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6
SHA512

31ab48b8954e1b31aac06aafa97e981bb469fc8802f72aa8643dc65556e47bcf431b691d9ce95feef31be0b0b1adf0b9032148263d3f44e3aade7d5a0c1690e9
SSDEEP

768:ma+BTbHWdmXL8Aj5mlSI9CFcOvvgggUUUBzUKgW39xNQNwrBZzW3JZWXHtRpnVKJ:R+x0mXL8ApEAhj3C1u4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2592	2632	WerFault.exe	14

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2632 wrote to memory of 2592	2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe	29
PID 2632 wrote to memory of 2592	2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe	29
PID 2632 wrote to memory of 2592	2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe	29
PID 2632 wrote to memory of 2592	2632	7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe	29

C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe
"C:\Users\Admin\AppData\Local\Temp\7d9032b9828937547f44e7c62431252aaa402018bb405548e8a32e1f40b58bf6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 428
  2⤵
  - Program crash
  PID:2592