7df0a9fc18637ba039a3c336d70e4dc862cefb60dea302febde527f552dcf0e5

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 08:55

Target

13dc87483192599a454ad907618683b4.exe
Size

95KB
MD5

13dc87483192599a454ad907618683b4
SHA1

048b67b07833522bf35807ccac8fa6052ea5f400
SHA256

7df0a9fc18637ba039a3c336d70e4dc862cefb60dea302febde527f552dcf0e5
SHA512

0a17249152bd8f70df24daad5cec8d770763b33a9b00afe9df90c9942132df9e05db5b5eacceae268b6ecae6f41d28efa98d166d9e44bfdb4b69a70ad0bc3ccf
SSDEEP

1536:z3P4OOGfH+4VXyOOrnFtsmD4B3D4eS9u10YA1X+WeqBq8Pcx5mArdPLRyM5nshCQ:TA3Gm4VCOOrnFtQ3D4H96Ueia5mOyMzQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2932	2348	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 2932	2348	13dc87483192599a454ad907618683b4.exe	28
PID 2348 wrote to memory of 2932	2348	13dc87483192599a454ad907618683b4.exe	28
PID 2348 wrote to memory of 2932	2348	13dc87483192599a454ad907618683b4.exe	28
PID 2348 wrote to memory of 2932	2348	13dc87483192599a454ad907618683b4.exe	28

C:\Users\Admin\AppData\Local\Temp\13dc87483192599a454ad907618683b4.exe
"C:\Users\Admin\AppData\Local\Temp\13dc87483192599a454ad907618683b4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 176
  2⤵
  - Program crash
  PID:2932

memory/2348-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2348-1-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download