d3a702b3a3a64caaca556d5b6bbb155f0d86d1a7ff0b0037702b0c4be2f2db50

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 16:13

Target

7bc378fa858383f2121b2f45eef752d2.exe
Size

180KB
MD5

7bc378fa858383f2121b2f45eef752d2
SHA1

8f63499b773eafb71171601364feb358aae6825b
SHA256

d3a702b3a3a64caaca556d5b6bbb155f0d86d1a7ff0b0037702b0c4be2f2db50
SHA512

48cb5919b3aa03191363cd5c0e9ad9547e84d7e34f2a010b11f659aa054e125609d1c4aac261c18c30e1adf22e337f1125011b5ba324fca97bdfcf9a6d84e960
SSDEEP

3072:t8TwfGQBjlZgsT3MC6nXAiu56FNpEXwpX1VbYaxRylvTJVIVNj:t8EGcTg42XAiw6FNCXwRYaMLJVk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1636	3068	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3068 wrote to memory of 1636	3068	7bc378fa858383f2121b2f45eef752d2.exe	28
PID 3068 wrote to memory of 1636	3068	7bc378fa858383f2121b2f45eef752d2.exe	28
PID 3068 wrote to memory of 1636	3068	7bc378fa858383f2121b2f45eef752d2.exe	28
PID 3068 wrote to memory of 1636	3068	7bc378fa858383f2121b2f45eef752d2.exe	28

C:\Users\Admin\AppData\Local\Temp\7bc378fa858383f2121b2f45eef752d2.exe
"C:\Users\Admin\AppData\Local\Temp\7bc378fa858383f2121b2f45eef752d2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3068
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 116
  2⤵
  - Program crash
  PID:1636

memory/3068-0-0x0000000000400000-0x00000000004B7000-memory.dmp

Filesize
732KB

Download
memory/3068-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/3068-2-0x0000000000400000-0x00000000004B7000-memory.dmp

Filesize
732KB

Download
memory/3068-3-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download