8347bd8ba242cf70ffa2752886d7fe743a4089c4438a7b4d15da4d13de3d2d0f

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 11:55

Target

17b2cce78717fd26615960f58ceaf8d6.exe
Size

148KB
MD5

17b2cce78717fd26615960f58ceaf8d6
SHA1

66b8e81bcd0569d14bb749ca962b82e2540ac02b
SHA256

8347bd8ba242cf70ffa2752886d7fe743a4089c4438a7b4d15da4d13de3d2d0f
SHA512

c4586605863d0ed233b0ff72fe72ba2f7f16e2d4067957c3474afcaa0042b2e7182ce0d25c3caac16c4630f7b7be617b57f3b5dae954a46bede501b2017eda4b
SSDEEP

3072:mSeXqFzxgwMylAUR6UQUcJPPB5RPXsS+t9ji/4oQZiEk7:m0FzxgZVU49xEtl4W2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2356	1992	WerFault.exe	9

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1992	17b2cce78717fd26615960f58ceaf8d6.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 2356	1992	17b2cce78717fd26615960f58ceaf8d6.exe	16
PID 1992 wrote to memory of 2356	1992	17b2cce78717fd26615960f58ceaf8d6.exe	16
PID 1992 wrote to memory of 2356	1992	17b2cce78717fd26615960f58ceaf8d6.exe	16
PID 1992 wrote to memory of 2356	1992	17b2cce78717fd26615960f58ceaf8d6.exe	16

C:\Users\Admin\AppData\Local\Temp\17b2cce78717fd26615960f58ceaf8d6.exe
"C:\Users\Admin\AppData\Local\Temp\17b2cce78717fd26615960f58ceaf8d6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 188
  2⤵
  - Program crash
  PID:2356