57e6d474b37d986652738c31c40c938c4b5d288d13c6b351d5883dc2c6adaefe

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 18:36

Target

00a58f63c34e4be1e578233b3e7864ea.exe
Size

68KB
MD5

00a58f63c34e4be1e578233b3e7864ea
SHA1

16323057d5d1332ae4cefeecabc3ea89f17c3d00
SHA256

57e6d474b37d986652738c31c40c938c4b5d288d13c6b351d5883dc2c6adaefe
SHA512

3b6f311a49472f27d1d940874e395f094ffea0cdcbb9fbd481b6e366cdcbbe239b26232b835fe8474edb9edc8a749cf562609576882188d0d36ae2925ed6ce5e
SSDEEP

768:mT64CrgEST8E7TFMKymvkblFBOSSlLM9KOb8hriQgri4eYUW+GeZ3xFTu1jKwjms:xjgEGnezxSZM9KQUrvHa+rTu12wqJJQ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1636 set thread context of 4052	1636	00a58f63c34e4be1e578233b3e7864ea.exe	91

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3252	4052	WerFault.exe	91
1644	4052	WerFault.exe	91

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 4052	1636	00a58f63c34e4be1e578233b3e7864ea.exe	91
PID 1636 wrote to memory of 4052	1636	00a58f63c34e4be1e578233b3e7864ea.exe	91
PID 1636 wrote to memory of 4052	1636	00a58f63c34e4be1e578233b3e7864ea.exe	91
PID 1636 wrote to memory of 4052	1636	00a58f63c34e4be1e578233b3e7864ea.exe	91

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4052 -ip 4052
1⤵
PID:3412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4052 -ip 4052
1⤵
PID:3536

memory/4052-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4052-1-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download