eeb949590ca7fe2c19639206ca80dfb52a67ca41bdc0658a61b0f5b7ba070b56

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 13:19

Target

19c5d06eede989a40adf0c2678d4d751.exe
Size

184KB
MD5

19c5d06eede989a40adf0c2678d4d751
SHA1

f27f65c00ff0be1945739a504aadf1906a3b3e68
SHA256

eeb949590ca7fe2c19639206ca80dfb52a67ca41bdc0658a61b0f5b7ba070b56
SHA512

f77856826bb98266c192595ffaba15c04d463a0e481acccb4fb8f248e04ef02b427b23ae5e001333fe86694413335bc3eea440e386f0fad76e58848aaf0decf2
SSDEEP

3072:l+1joEN8XJA8kFjbwzXS08dbP8t6QSpWfDMx+YdbUNl/vpF1:l+lobm8khwDS08FgdHNl/vpF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2212	1996	WerFault.exe	12

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1996	19c5d06eede989a40adf0c2678d4d751.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 2212	1996	19c5d06eede989a40adf0c2678d4d751.exe	28
PID 1996 wrote to memory of 2212	1996	19c5d06eede989a40adf0c2678d4d751.exe	28
PID 1996 wrote to memory of 2212	1996	19c5d06eede989a40adf0c2678d4d751.exe	28
PID 1996 wrote to memory of 2212	1996	19c5d06eede989a40adf0c2678d4d751.exe	28

C:\Users\Admin\AppData\Local\Temp\19c5d06eede989a40adf0c2678d4d751.exe
"C:\Users\Admin\AppData\Local\Temp\19c5d06eede989a40adf0c2678d4d751.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 240
  2⤵
  - Program crash
  PID:2212