214bcd33937d5114ddaaa0e649da937077b1446947a2394cc226a0d4d2abce26

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 00:46

Target

222ba80a6688345e1fd55e47cc86f028.exe
Size

68KB
MD5

222ba80a6688345e1fd55e47cc86f028
SHA1

8961851fba8aa5473f06eddddf4941ef0820f721
SHA256

214bcd33937d5114ddaaa0e649da937077b1446947a2394cc226a0d4d2abce26
SHA512

92ad7273967ac21d8540ca5b7812e18f9fd5ddcc1bfce8c593aad04a28d66f7c546104e748631ce9446031c3cfd9d697adb0ed6e6b8e1548ee34d8517fe1216c
SSDEEP

1536:ACfaE9RcnjHFv9FlF9BFfYRKYqgnq9jZ/YirOkpoA:ACfaEnMjHL/F9BRqKY5n6jZ/3akpZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	2536	WerFault.exe	15

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 2204	2536	222ba80a6688345e1fd55e47cc86f028.exe	28
PID 2536 wrote to memory of 2204	2536	222ba80a6688345e1fd55e47cc86f028.exe	28
PID 2536 wrote to memory of 2204	2536	222ba80a6688345e1fd55e47cc86f028.exe	28
PID 2536 wrote to memory of 2204	2536	222ba80a6688345e1fd55e47cc86f028.exe	28

C:\Users\Admin\AppData\Local\Temp\222ba80a6688345e1fd55e47cc86f028.exe
"C:\Users\Admin\AppData\Local\Temp\222ba80a6688345e1fd55e47cc86f028.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2536 -s 148
  2⤵
  - Program crash
  PID:2204

memory/2536-0-0x0000000000400000-0x000000000040D640-memory.dmp

Filesize
53KB

Download