f1bbeac2c4f72c4f64eda5a4c954f968fe3376f6db60a0beccc551c32b400e08

Analysis

max time kernel
141s
max time network
139s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 18:36

Target

00a21af86d5da941917113d74048f7bd.exe
Size

600KB
MD5

00a21af86d5da941917113d74048f7bd
SHA1

25787e9f0d8515f186fd12be37407f5b1346f807
SHA256

f1bbeac2c4f72c4f64eda5a4c954f968fe3376f6db60a0beccc551c32b400e08
SHA512

0fb5ebbc37d753672e7e6b3b99022970fafa3513e965222ea25ea0127513964e39d336b08ccea6f15e71915f397b6f22e8bd408fc8567ccb077302fcd7c71308
SSDEEP

12288:c09L58wWbYUB+G2eSpxkCqm6CF3Z4mxxl5iEha7jk97dUB:cO8X/fSimpQmX+Ehha

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2732	1200	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 2732	1200	00a21af86d5da941917113d74048f7bd.exe	28
PID 1200 wrote to memory of 2732	1200	00a21af86d5da941917113d74048f7bd.exe	28
PID 1200 wrote to memory of 2732	1200	00a21af86d5da941917113d74048f7bd.exe	28
PID 1200 wrote to memory of 2732	1200	00a21af86d5da941917113d74048f7bd.exe	28

C:\Users\Admin\AppData\Local\Temp\00a21af86d5da941917113d74048f7bd.exe
"C:\Users\Admin\AppData\Local\Temp\00a21af86d5da941917113d74048f7bd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1200 -s 168
  2⤵
  - Program crash
  PID:2732

memory/1200-0-0x0000000000400000-0x00000000004AB000-memory.dmp

Filesize
684KB

Download
memory/1200-1-0x0000000000280000-0x00000000002D4000-memory.dmp

Filesize
336KB

Download
memory/1200-12-0x00000000031C0000-0x00000000031C2000-memory.dmp

Filesize
8KB

Download
memory/1200-11-0x00000000031D0000-0x00000000031D1000-memory.dmp

Filesize
4KB

Download
memory/1200-10-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download
memory/1200-9-0x0000000000620000-0x0000000000621000-memory.dmp

Filesize
4KB

Download
memory/1200-8-0x00000000005E0000-0x00000000005E1000-memory.dmp

Filesize
4KB

Download
memory/1200-7-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/1200-6-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/1200-5-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/1200-4-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/1200-3-0x00000000005B0000-0x00000000005B1000-memory.dmp

Filesize
4KB

Download
memory/1200-2-0x00000000005D0000-0x00000000005D1000-memory.dmp

Filesize
4KB

Download
memory/1200-13-0x0000000000400000-0x00000000004AB000-memory.dmp

Filesize
684KB

Download
memory/1200-14-0x0000000000280000-0x00000000002D4000-memory.dmp

Filesize
336KB

Download