c8aeebbb41ce0a2ba23a9ab434f98cd3865ec90506c1ff0d36f2c6f3caa7d26d

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 12:10

Target

1819b4986c454975daa24eaad05c32f5.exe
Size

552KB
MD5

1819b4986c454975daa24eaad05c32f5
SHA1

4be24e69bbbd7fbd72be13be9427ecc3bfc4d6e1
SHA256

c8aeebbb41ce0a2ba23a9ab434f98cd3865ec90506c1ff0d36f2c6f3caa7d26d
SHA512

6d304a834507796b0d983c19fd56700a30ecde80ad547ae24207fcf13ee1124ebdf2eb833248ba38b995f1e9d206d53354ed9796de4a5f1b1b1c0a6ec7ee92b9
SSDEEP

768:v9qLXopi1z7058WvNH/OWdJppPWcraYHEAsEG5Chzs2iChzs2iChzs2iChzs2iCF:v9npAKnNZppPbrWAsEd5F5F5F5F5Z

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2876	1508	WerFault.exe	26

Suspicious use of SetWindowsHookEx 3 IoCs

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29
PID 1508 wrote to memory of 2876	1508	1819b4986c454975daa24eaad05c32f5.exe	29

C:\Users\Admin\AppData\Local\Temp\1819b4986c454975daa24eaad05c32f5.exe
"C:\Users\Admin\AppData\Local\Temp\1819b4986c454975daa24eaad05c32f5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 668
  2⤵
  - Program crash
  PID:2876

memory/1508-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/1508-1-0x0000000000020000-0x0000000000030000-memory.dmp

Filesize
64KB

Download
memory/1508-2-0x0000000000020000-0x0000000000030000-memory.dmp

Filesize
64KB

Download