53b6da7dbab1702f5673a03c6328e58bfa87bc5e48e1b72a66615f007a8446c1

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 18:12

Target

002558bd3589110a04661e2aef384ead.exe
Size

156KB
MD5

002558bd3589110a04661e2aef384ead
SHA1

06575b3ec14a43a0ee95b8e6f31d689f823be983
SHA256

53b6da7dbab1702f5673a03c6328e58bfa87bc5e48e1b72a66615f007a8446c1
SHA512

21c958cc7d69a4082aa258d938f74cd6db9ebd187c71392d3ef5510d30c044734536d9e8ee853dd11929a70c409f5afb94c7d381e6c60bbfeb13af2cf58842bf
SSDEEP

1536:86kumouYKBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAbWQgRV7:8ouY8a4UbaxqkCGaVD7JqfKAbno7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1908	2532	WerFault.exe	14

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2532	002558bd3589110a04661e2aef384ead.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 1908	2532	002558bd3589110a04661e2aef384ead.exe	15
PID 2532 wrote to memory of 1908	2532	002558bd3589110a04661e2aef384ead.exe	15
PID 2532 wrote to memory of 1908	2532	002558bd3589110a04661e2aef384ead.exe	15
PID 2532 wrote to memory of 1908	2532	002558bd3589110a04661e2aef384ead.exe	15

C:\Users\Admin\AppData\Local\Temp\002558bd3589110a04661e2aef384ead.exe
"C:\Users\Admin\AppData\Local\Temp\002558bd3589110a04661e2aef384ead.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 188
  2⤵
  - Program crash
  PID:1908