f50d5bcab38b2d456abd48079b1b57a7bf142accec1b58e388bf2552b0b07988

Analysis

max time kernel
122s
max time network
144s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 13:04

Target

37314763d6fba21647ee411010c8a8b8.exe
Size

10KB
MD5

37314763d6fba21647ee411010c8a8b8
SHA1

cee8d892e6235073a0ea6ddc16c9d4cc660a88ac
SHA256

f50d5bcab38b2d456abd48079b1b57a7bf142accec1b58e388bf2552b0b07988
SHA512

71acd631784634089b58895efcda893608b600d743619238d9c17c4ef214c550f8434b6e3adcf5cda3f209efc3d4b2431c3cdf3751bf01dd90cec6492c1296d6
SSDEEP

192:hZrAZ+rL8tqOSDdkV1slqMhmNTL5tlVz9ySKykg7e/12r/oMGM7DwahYiIJ:HSUodULCzXzwSKzMG12LaIYiM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2868	2396	WerFault.exe	22

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 2868	2396	37314763d6fba21647ee411010c8a8b8.exe	28
PID 2396 wrote to memory of 2868	2396	37314763d6fba21647ee411010c8a8b8.exe	28
PID 2396 wrote to memory of 2868	2396	37314763d6fba21647ee411010c8a8b8.exe	28
PID 2396 wrote to memory of 2868	2396	37314763d6fba21647ee411010c8a8b8.exe	28

C:\Users\Admin\AppData\Local\Temp\37314763d6fba21647ee411010c8a8b8.exe
"C:\Users\Admin\AppData\Local\Temp\37314763d6fba21647ee411010c8a8b8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2396 -s 36
  2⤵
  - Program crash
  PID:2868