dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:47

Target

dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe
Size

5KB
MD5

6dfc4b9e2334366571935e068be159da
SHA1

46a406ca009ab86bb44df30ce0006261f8856139
SHA256

dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1
SHA512

8cbfa06530fbb7746f7fb2dab1d9734fda4eb5b29c34c6dd46d6df141198bf52e8733fc61a171e26f8f46bd5697dbfe5127c67c07cd37a674d0a8d4d0e0cc918
SSDEEP

48:SPlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t7RuqSxp:QWLkFfNnOKYloIQ2pm2pbYSJxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
1644	2496	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2496 wrote to memory of 1644	2496	dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe	14
PID 2496 wrote to memory of 1644	2496	dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe	14
PID 2496 wrote to memory of 1644	2496	dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe	14
PID 2496 wrote to memory of 1644	2496	dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe	14

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 48
1⤵
- Program crash
PID:1644

C:\Users\Admin\AppData\Local\Temp\dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe
"C:\Users\Admin\AppData\Local\Temp\dc9b9557f457dbfafdce2d3f8ffc5b3150ea155710d5363056f6da53d85ec2e1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2496