08fd7e735afa2ee37d2aeddab975018491a21bad4561bc01fb2da9c9af0e5be2

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 21:07

Target

1c7d537098a54c1de9b14e7b5f18e701.exe
Size

13KB
MD5

1c7d537098a54c1de9b14e7b5f18e701
SHA1

ae0778804aacc3ae89c6205ec8214fd39ba47ad8
SHA256

08fd7e735afa2ee37d2aeddab975018491a21bad4561bc01fb2da9c9af0e5be2
SHA512

4131c7006a2618d903ee193a631710614caedd986e718e1517d7079994de9dd492b5d68649669b7f5a132231024dda63b8e19acee6b47e2cf97bcfc2e9ff67ca
SSDEEP

384:DvPSGnVaSCJt6aRrZ8EF/KVRv2eYac7TsZquX5uBUWrzIK:jRaYaRrZ/F/KVRv2eYac7TsZquX5iUYv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2412	2036	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2412	2036	1c7d537098a54c1de9b14e7b5f18e701.exe	28
PID 2036 wrote to memory of 2412	2036	1c7d537098a54c1de9b14e7b5f18e701.exe	28
PID 2036 wrote to memory of 2412	2036	1c7d537098a54c1de9b14e7b5f18e701.exe	28
PID 2036 wrote to memory of 2412	2036	1c7d537098a54c1de9b14e7b5f18e701.exe	28

C:\Users\Admin\AppData\Local\Temp\1c7d537098a54c1de9b14e7b5f18e701.exe
"C:\Users\Admin\AppData\Local\Temp\1c7d537098a54c1de9b14e7b5f18e701.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 88
  2⤵
  - Program crash
  PID:2412