37e3ba716419e282050494f9eaacaa5221965e6a22363d7f65e855e97eaee433

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 14:26

Target

758402654c735db95755f4bc2537aba0.exe
Size

20KB
MD5

758402654c735db95755f4bc2537aba0
SHA1

aab7385d89a9ef4ec6203111d42c1b59c2103161
SHA256

37e3ba716419e282050494f9eaacaa5221965e6a22363d7f65e855e97eaee433
SHA512

f509614e2e8b4ad5ce3a76eb793be1aa742439c4991fa71b73445bec55683dd4c3d1163a41f5d2fbf94536ede4d8c248e37cf2195657b8c31ea99b1e08b31beb
SSDEEP

384:aS4hQ6Oud9qGNEhRbeq/KnUUXbZ6Ftps2bOBZ4Bwg:alelud9qGNEXtLA4psIOBZ4Wg

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2716	2804	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 2716	2804	758402654c735db95755f4bc2537aba0.exe	28
PID 2804 wrote to memory of 2716	2804	758402654c735db95755f4bc2537aba0.exe	28
PID 2804 wrote to memory of 2716	2804	758402654c735db95755f4bc2537aba0.exe	28
PID 2804 wrote to memory of 2716	2804	758402654c735db95755f4bc2537aba0.exe	28

C:\Users\Admin\AppData\Local\Temp\758402654c735db95755f4bc2537aba0.exe
"C:\Users\Admin\AppData\Local\Temp\758402654c735db95755f4bc2537aba0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2804
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2804 -s 92
  2⤵
  - Program crash
  PID:2716

memory/2804-0-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download