1f10cbbdfceb69c8860ead3986d8c237697ddc33af7c2c477b8372845fbf1aa8

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 21:15

Target

1caeaf22c02bfd0751d9c45f8e02cb9c.exe
Size

1.8MB
MD5

1caeaf22c02bfd0751d9c45f8e02cb9c
SHA1

86dfbeb818fdb6d001e4a360317f106ecd56e653
SHA256

1f10cbbdfceb69c8860ead3986d8c237697ddc33af7c2c477b8372845fbf1aa8
SHA512

1740baa59b75babe5250b5a60b6ef01c933d2eb995d6273d78652ddc32d70d969005e136f429ae70c0d5af96bd0b1ea9121d82a9359bacd232c44c7b2ef8b1ef
SSDEEP

12288:eYGLDW3XOUlBaTUlBclrbUlBaTUlB8gLUlBaTUlBclrbUlBaTUlB5FahUlBaTUlQ:/ODWS1lTJgP1lTXt1lTJgP1lT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2772	2420	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2772	2420	1caeaf22c02bfd0751d9c45f8e02cb9c.exe	28
PID 2420 wrote to memory of 2772	2420	1caeaf22c02bfd0751d9c45f8e02cb9c.exe	28
PID 2420 wrote to memory of 2772	2420	1caeaf22c02bfd0751d9c45f8e02cb9c.exe	28
PID 2420 wrote to memory of 2772	2420	1caeaf22c02bfd0751d9c45f8e02cb9c.exe	28

C:\Users\Admin\AppData\Local\Temp\1caeaf22c02bfd0751d9c45f8e02cb9c.exe
"C:\Users\Admin\AppData\Local\Temp\1caeaf22c02bfd0751d9c45f8e02cb9c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2420 -s 140
  2⤵
  - Program crash
  PID:2772

memory/2420-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/2420-1-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download