610a3a69f69b5fddae87d001a681ae61866e521c28e280c4bccf12fc03e23940

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 03:12

Target

25ed58dd3ae1df5e08ea39eb36cb210e.exe
Size

55KB
MD5

25ed58dd3ae1df5e08ea39eb36cb210e
SHA1

b1128a349c783eae21c210af33bfac1405b5c876
SHA256

610a3a69f69b5fddae87d001a681ae61866e521c28e280c4bccf12fc03e23940
SHA512

e729e9922f9ff66b0efc836ff8d1aec4a5a08d3ac437329eb7fb42122e963e4c255e9b5f4a435b7fb91f6dd55a78b4ea1d03546b4367229e2f9c520f4a561b77
SSDEEP

768:cx/ijhiukLfOeTczfkYRCtMJhdXFEs53H8CyA2uZhUkwZW92p/1H5KLXdnh:G/Hu+CAGfLI8hUkwZW92LkJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2924	2136	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2924	2136	25ed58dd3ae1df5e08ea39eb36cb210e.exe	16
PID 2136 wrote to memory of 2924	2136	25ed58dd3ae1df5e08ea39eb36cb210e.exe	16
PID 2136 wrote to memory of 2924	2136	25ed58dd3ae1df5e08ea39eb36cb210e.exe	16
PID 2136 wrote to memory of 2924	2136	25ed58dd3ae1df5e08ea39eb36cb210e.exe	16

C:\Users\Admin\AppData\Local\Temp\25ed58dd3ae1df5e08ea39eb36cb210e.exe
"C:\Users\Admin\AppData\Local\Temp\25ed58dd3ae1df5e08ea39eb36cb210e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 140
  2⤵
  - Program crash
  PID:2924

memory/2136-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/2136-1-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download