59bc555638360c8ef764973b19766091aae99f45352059c8a0394e896b5c6e62

Analysis

max time kernel
119s
max time network
134s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 21:54

Target

1db4ff80f0d80fce75322e6e9e6b85de.exe
Size

56KB
MD5

1db4ff80f0d80fce75322e6e9e6b85de
SHA1

6d6e63ddaf0572437159cf073485bb03e7b32b6b
SHA256

59bc555638360c8ef764973b19766091aae99f45352059c8a0394e896b5c6e62
SHA512

c2f5c9295a21238ac939a6ee6ff04a842b562048331c528dd000a398135bc0c0a83d06dec65e858eabcc0afcbd738cebddd6ff331ef28cc969ec49742b276c3c
SSDEEP

1536:e5ytU/4OvZZqSjSivHH4GAuwMyhh2cRFk+gS12/s/:e5ytk4OBxjx45uwM+fE+gl/0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1504	2548	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 1504	2548	1db4ff80f0d80fce75322e6e9e6b85de.exe	28
PID 2548 wrote to memory of 1504	2548	1db4ff80f0d80fce75322e6e9e6b85de.exe	28
PID 2548 wrote to memory of 1504	2548	1db4ff80f0d80fce75322e6e9e6b85de.exe	28
PID 2548 wrote to memory of 1504	2548	1db4ff80f0d80fce75322e6e9e6b85de.exe	28

C:\Users\Admin\AppData\Local\Temp\1db4ff80f0d80fce75322e6e9e6b85de.exe
"C:\Users\Admin\AppData\Local\Temp\1db4ff80f0d80fce75322e6e9e6b85de.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 36
  2⤵
  - Program crash
  PID:1504