b21ce07d615178ead666dbeb75b50eb4fdebddd4aeef19daadaa06fede93e367

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 14:27

Target

39ce796a19bf03ba1a75fb931e49ced9.exe
Size

69KB
MD5

39ce796a19bf03ba1a75fb931e49ced9
SHA1

7859238d4c677c703d540a7e23e642122fa02d80
SHA256

b21ce07d615178ead666dbeb75b50eb4fdebddd4aeef19daadaa06fede93e367
SHA512

b3b56a400be60d04239dbbc9247d7053051a71bf14a910bbad9475f9109fa665d080db3bdebfbb786f5435b6d1f63f1c346557c9caea415b0e89634d63f218b9
SSDEEP

1536:sf1bBC2W4YSn+K9njIbWwv6tiXSwDIXWr6uWw6c3mTZvvVAx3nO:stbBdWQnAbWwmeDImrki3+BNAx3O

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2276	2328	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2276	2328	39ce796a19bf03ba1a75fb931e49ced9.exe	15
PID 2328 wrote to memory of 2276	2328	39ce796a19bf03ba1a75fb931e49ced9.exe	15
PID 2328 wrote to memory of 2276	2328	39ce796a19bf03ba1a75fb931e49ced9.exe	15
PID 2328 wrote to memory of 2276	2328	39ce796a19bf03ba1a75fb931e49ced9.exe	15

C:\Users\Admin\AppData\Local\Temp\39ce796a19bf03ba1a75fb931e49ced9.exe
"C:\Users\Admin\AppData\Local\Temp\39ce796a19bf03ba1a75fb931e49ced9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 116
  2⤵
  - Program crash
  PID:2276

memory/2328-0-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2328-1-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download