734f395e3dd7ee967f6a3c8a53a30b4541cea9d0aeff9e574b1811feb4171154

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 16:33

Target

7cfc4ed0e6081bc61615aecd60e62667.exe
Size

16KB
MD5

7cfc4ed0e6081bc61615aecd60e62667
SHA1

f97343a0412605ec6cf87016c90401a0c2618766
SHA256

734f395e3dd7ee967f6a3c8a53a30b4541cea9d0aeff9e574b1811feb4171154
SHA512

36b006f2ef897e33ff34332d0a62d47ac65e3f10e5849c2bc01464e0af84e8f3bff56dab8769a10e16b3924f63b72788060414742f88636e049eab1f66189a52
SSDEEP

192:UfhVAcTYinOlDeAd1A348BJkZmjLKnloYn4ccIesfCv8lk7lcV7sM1uhG:UfnnTYGAd38BqCLO4pXsfa8lGlcv1uh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2364	2148	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 2364	2148	7cfc4ed0e6081bc61615aecd60e62667.exe	28
PID 2148 wrote to memory of 2364	2148	7cfc4ed0e6081bc61615aecd60e62667.exe	28
PID 2148 wrote to memory of 2364	2148	7cfc4ed0e6081bc61615aecd60e62667.exe	28
PID 2148 wrote to memory of 2364	2148	7cfc4ed0e6081bc61615aecd60e62667.exe	28

C:\Users\Admin\AppData\Local\Temp\7cfc4ed0e6081bc61615aecd60e62667.exe
"C:\Users\Admin\AppData\Local\Temp\7cfc4ed0e6081bc61615aecd60e62667.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 516
  2⤵
  - Program crash
  PID:2364

memory/2148-0-0x0000000000360000-0x000000000036C000-memory.dmp

Filesize
48KB

Download
memory/2148-1-0x00000000748B0000-0x0000000074F9E000-memory.dmp

Filesize
6.9MB

Download
memory/2148-2-0x00000000748B0000-0x0000000074F9E000-memory.dmp

Filesize
6.9MB

Download