fb43f31f887533521da5602b01a662f10a0ee31abf441f6c7cf780916131bcf1

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:13

Target

09b5f9052d8353965826c81c0f6ee3f4.exe
Size

44KB
MD5

09b5f9052d8353965826c81c0f6ee3f4
SHA1

93426e844a4512516a9948d0aafd5d5a090e1f9f
SHA256

fb43f31f887533521da5602b01a662f10a0ee31abf441f6c7cf780916131bcf1
SHA512

7a9853d2674051ad74735193dcc7a161bf42e5f199dbe673f34659708a483e9825ca8449b28e4cdfe2d584a70d05dbe97cac9afd0a06075809484f87e8388cff
SSDEEP

768:5JPVRbuKWj4O5G/aE5tSZciqkpK5FXnq8VOZu9pGjMYLr3VTAQX8:5JtIKI5GiStRiqAK59+Zn3J5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2500	2108	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2500	2108	09b5f9052d8353965826c81c0f6ee3f4.exe	28
PID 2108 wrote to memory of 2500	2108	09b5f9052d8353965826c81c0f6ee3f4.exe	28
PID 2108 wrote to memory of 2500	2108	09b5f9052d8353965826c81c0f6ee3f4.exe	28
PID 2108 wrote to memory of 2500	2108	09b5f9052d8353965826c81c0f6ee3f4.exe	28

C:\Users\Admin\AppData\Local\Temp\09b5f9052d8353965826c81c0f6ee3f4.exe
"C:\Users\Admin\AppData\Local\Temp\09b5f9052d8353965826c81c0f6ee3f4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 88
  2⤵
  - Program crash
  PID:2500

memory/2108-1-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/2108-0-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download