648ee4fc120921538d5d5b3454b17ca3e65e4e4b4d45b67a5c9452263be8bbf6

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 03:40

Target

0d3fbd6beda76d9e0542b4c9fb9b1005.exe
Size

204KB
MD5

0d3fbd6beda76d9e0542b4c9fb9b1005
SHA1

7e098fb5c31d69f2e7c2cec9592e9ecc2bf1c7b9
SHA256

648ee4fc120921538d5d5b3454b17ca3e65e4e4b4d45b67a5c9452263be8bbf6
SHA512

cb211578fdcbd303ebbd5a8c035821700b2c1e4355ae5de33df1e0d77143f5b6d02e0b80269aa642d3420689b0a27e2a9c47e128275976f9fa85eddf69b3bd3d
SSDEEP

3072:FehCDNpvU+mzihKh8wpzDqulR3X9sDpLg6ZGKIXeYnclD:Fe+EV82llbs1g6+Xbc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2268	2284	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2284	0d3fbd6beda76d9e0542b4c9fb9b1005.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 2268	2284	0d3fbd6beda76d9e0542b4c9fb9b1005.exe	28
PID 2284 wrote to memory of 2268	2284	0d3fbd6beda76d9e0542b4c9fb9b1005.exe	28
PID 2284 wrote to memory of 2268	2284	0d3fbd6beda76d9e0542b4c9fb9b1005.exe	28
PID 2284 wrote to memory of 2268	2284	0d3fbd6beda76d9e0542b4c9fb9b1005.exe	28

C:\Users\Admin\AppData\Local\Temp\0d3fbd6beda76d9e0542b4c9fb9b1005.exe
"C:\Users\Admin\AppData\Local\Temp\0d3fbd6beda76d9e0542b4c9fb9b1005.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 188
  2⤵
  - Program crash
  PID:2268