ffb7f7a9038c36019a35f01f335dbecb25a85ae328058c8f913f2213b17368d9

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 12:17

Target

183e6650ec68ee88071e12987176c2a6.exe
Size

184KB
MD5

183e6650ec68ee88071e12987176c2a6
SHA1

317ea6f9f1b3456162a9617016af01a9475fad05
SHA256

ffb7f7a9038c36019a35f01f335dbecb25a85ae328058c8f913f2213b17368d9
SHA512

29bc721bc763265763e0122bb5f6282e848718d679bb3a8a1b895c05a922a40000854a6fb13056e1ef59144e1934feee84eab0a760caeb56c135794085a368b0
SSDEEP

3072:6ekPoMrfuA0B5jkdTAc9z4bBuI6NUqICDzlpbPMPHlVdppu/:6e4oyj0BSd0c9zOTuaHlVdp8

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2136	2416	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2416	183e6650ec68ee88071e12987176c2a6.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 2136	2416	183e6650ec68ee88071e12987176c2a6.exe	28
PID 2416 wrote to memory of 2136	2416	183e6650ec68ee88071e12987176c2a6.exe	28
PID 2416 wrote to memory of 2136	2416	183e6650ec68ee88071e12987176c2a6.exe	28
PID 2416 wrote to memory of 2136	2416	183e6650ec68ee88071e12987176c2a6.exe	28

C:\Users\Admin\AppData\Local\Temp\183e6650ec68ee88071e12987176c2a6.exe
"C:\Users\Admin\AppData\Local\Temp\183e6650ec68ee88071e12987176c2a6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2416 -s 240
  2⤵
  - Program crash
  PID:2136