d3ade37ffcc24578ce4e6154306eedc2534336d969c06cdc382f8216284c9a00

Analysis

max time kernel
142s
max time network
138s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 13:19

Target

71cc86a8f4d8769eaa2817545b34c5cc.exe
Size

323KB
MD5

71cc86a8f4d8769eaa2817545b34c5cc
SHA1

d696b3317bf55c9ed57d99eb9168879715e3fbbb
SHA256

d3ade37ffcc24578ce4e6154306eedc2534336d969c06cdc382f8216284c9a00
SHA512

15ec4883123af1f7e8fcd4d5132bbb7f3ba1edab77c29c8e0f41a62825dd8c2d015d29dd64a9873cf5470fcd1ef8c4f0a7173c729002f8da759b23cd00ec5e7d
SSDEEP

6144:IFhRONKpfOTyHGH1dB0GgkWLdWZR3Fa3n+m1ehxqs3wzaCRtBIYa:Gh0OfOTyHGHf8dYG0ms3LaBI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2808	1876	WerFault.exe	11

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1876 wrote to memory of 2808	1876	71cc86a8f4d8769eaa2817545b34c5cc.exe	29
PID 1876 wrote to memory of 2808	1876	71cc86a8f4d8769eaa2817545b34c5cc.exe	29
PID 1876 wrote to memory of 2808	1876	71cc86a8f4d8769eaa2817545b34c5cc.exe	29
PID 1876 wrote to memory of 2808	1876	71cc86a8f4d8769eaa2817545b34c5cc.exe	29

C:\Users\Admin\AppData\Local\Temp\71cc86a8f4d8769eaa2817545b34c5cc.exe
"C:\Users\Admin\AppData\Local\Temp\71cc86a8f4d8769eaa2817545b34c5cc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 824
  2⤵
  - Program crash
  PID:2808

memory/1876-1-0x0000000012250000-0x0000000012308000-memory.dmp

Filesize
736KB

Download
memory/1876-3-0x0000000012250000-0x0000000012308000-memory.dmp

Filesize
736KB

Download
memory/1876-6-0x00000000004D0000-0x00000000004D1000-memory.dmp

Filesize
4KB

Download
memory/1876-5-0x00000000002B0000-0x000000000031A000-memory.dmp

Filesize
424KB

Download
memory/1876-4-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1876-2-0x0000000000470000-0x00000000004B7000-memory.dmp

Filesize
284KB

Download
memory/1876-7-0x0000000012250000-0x0000000012308000-memory.dmp

Filesize
736KB

Download
memory/1876-9-0x0000000000470000-0x00000000004B7000-memory.dmp

Filesize
284KB

Download
memory/1876-10-0x00000000004D0000-0x00000000004D1000-memory.dmp

Filesize
4KB

Download