8ae45b1f18244a11e55b9544c4e67a77dc93d27482c6e463f8c78c90237fadba

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 00:48

Target

090a5fabe25886ae22dd08abf3c0a755.exe
Size

162KB
MD5

090a5fabe25886ae22dd08abf3c0a755
SHA1

a0bd0d568084d73b6e54978901f8ee1453190873
SHA256

8ae45b1f18244a11e55b9544c4e67a77dc93d27482c6e463f8c78c90237fadba
SHA512

0a406b82386ef84820866c56813fe5d91e93d3a8ca4b70213ff05a9bc36a906578975706d57f8c9e43bec742614063bb13dd2e5a867c1c49bce9e01e84a6abb4
SSDEEP

3072:NVP8hJ7QZ9klgVhXJGhYUYFRtBy1beV64sUl2Ywz9EedH9t/Gk+IhNmE2rUifV:NVP837QUqVhXghNYLtwePsUTwRnd9tXi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2092	2900	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2900 wrote to memory of 2092	2900	090a5fabe25886ae22dd08abf3c0a755.exe	18
PID 2900 wrote to memory of 2092	2900	090a5fabe25886ae22dd08abf3c0a755.exe	18
PID 2900 wrote to memory of 2092	2900	090a5fabe25886ae22dd08abf3c0a755.exe	18
PID 2900 wrote to memory of 2092	2900	090a5fabe25886ae22dd08abf3c0a755.exe	18

C:\Users\Admin\AppData\Local\Temp\090a5fabe25886ae22dd08abf3c0a755.exe
"C:\Users\Admin\AppData\Local\Temp\090a5fabe25886ae22dd08abf3c0a755.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2900
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2900 -s 116
  2⤵
  - Program crash
  PID:2092