61f37f858fac0dfbc75e33a00d4e73c909d4bc15d53e33728f3de2e567d233b4

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:17

Target

09d319678bbbbeb6f80b22aee4e5fcf9.exe
Size

8KB
MD5

09d319678bbbbeb6f80b22aee4e5fcf9
SHA1

378a253715039616e1610fae937a22f8054f8c4b
SHA256

61f37f858fac0dfbc75e33a00d4e73c909d4bc15d53e33728f3de2e567d233b4
SHA512

31c8f3469f1d8a417a399b696fa172c0704d0f889a6c1273ca00e5228dacbdccb1ad88d84ae22ee90c6bec5fa16d250ce35cf5ca794d1a6f7fedf06f581207d9
SSDEEP

192:oRWSFaWrmhWlTS/RfI1k5ZMdNpmMkGRcHTIl1BDz2NIVYeYCii:YWSFaWrm8lTmqCrJaGs7Z/Ypi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2256	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2256	2236	09d319678bbbbeb6f80b22aee4e5fcf9.exe	28
PID 2236 wrote to memory of 2256	2236	09d319678bbbbeb6f80b22aee4e5fcf9.exe	28
PID 2236 wrote to memory of 2256	2236	09d319678bbbbeb6f80b22aee4e5fcf9.exe	28
PID 2236 wrote to memory of 2256	2236	09d319678bbbbeb6f80b22aee4e5fcf9.exe	28

C:\Users\Admin\AppData\Local\Temp\09d319678bbbbeb6f80b22aee4e5fcf9.exe
"C:\Users\Admin\AppData\Local\Temp\09d319678bbbbeb6f80b22aee4e5fcf9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 36
  2⤵
  - Program crash
  PID:2256