e33bc679e067483d85c71d0e384d56e3d1cfdb176d0dbecf8338cdd4a3fedecc

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 18:28

Target

0077931a748a134fbf6daaec9e15b1bc.exe
Size

418KB
MD5

0077931a748a134fbf6daaec9e15b1bc
SHA1

bbfd6e5fc94f86916e11d2204d82675a300614c8
SHA256

e33bc679e067483d85c71d0e384d56e3d1cfdb176d0dbecf8338cdd4a3fedecc
SHA512

8d06cc9c32b62a12f862bca752fe11d3fa47d511031dd717c09954f6182f333b5055890b4dd25e4a6728db2ef64628905b420306a2a1d83399a420fcab950d1d
SSDEEP

6144:LwLwwWFWjYtpL7VNdZxzx5zXrU7149xwrZUrraJqbZlI2E8Rs5nNj/YV70qPqw3d:FwWFx/Xp4HrSrraOI2xRs5NELFSPfG

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2312	2336	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 2312	2336	0077931a748a134fbf6daaec9e15b1bc.exe	28
PID 2336 wrote to memory of 2312	2336	0077931a748a134fbf6daaec9e15b1bc.exe	28
PID 2336 wrote to memory of 2312	2336	0077931a748a134fbf6daaec9e15b1bc.exe	28
PID 2336 wrote to memory of 2312	2336	0077931a748a134fbf6daaec9e15b1bc.exe	28

C:\Users\Admin\AppData\Local\Temp\0077931a748a134fbf6daaec9e15b1bc.exe
"C:\Users\Admin\AppData\Local\Temp\0077931a748a134fbf6daaec9e15b1bc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 36
  2⤵
  - Program crash
  PID:2312

memory/2336-0-0x0000000000400000-0x00000000004FB000-memory.dmp

Filesize
1004KB

Download