55ed2c2972c152f0126dabb83f64343563e0ded0a38ef7e0acd31f865fe12eee

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 08:11

Target

3c572caccb52483c21ae10eadd3bd48e.exe
Size

48KB
MD5

3c572caccb52483c21ae10eadd3bd48e
SHA1

a9ae76af710407e6133cb09781acc35db288ad7f
SHA256

55ed2c2972c152f0126dabb83f64343563e0ded0a38ef7e0acd31f865fe12eee
SHA512

0b36128636796a86ae7652b4cab0f6934eb53e72eb94888ae63a28c4861fa3519682397cb604019c4245ccaa970b4fe4fcb77016a656c566102c91a5008d9524
SSDEEP

384:yHiuVkeLtFA7IJyA1ou/1fT44iggJFWhtJI5LKdSCR7Zs2UjAR2B1n5HsWJ:kVzTAIP19fygKKTIpKdSals2OACyS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2856	2496	WerFault.exe	15

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2496	3c572caccb52483c21ae10eadd3bd48e.exe
2496	3c572caccb52483c21ae10eadd3bd48e.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 1260	2496	3c572caccb52483c21ae10eadd3bd48e.exe	13
PID 2496 wrote to memory of 2856	2496	3c572caccb52483c21ae10eadd3bd48e.exe	28
PID 2496 wrote to memory of 2856	2496	3c572caccb52483c21ae10eadd3bd48e.exe	28
PID 2496 wrote to memory of 2856	2496	3c572caccb52483c21ae10eadd3bd48e.exe	28
PID 2496 wrote to memory of 2856	2496	3c572caccb52483c21ae10eadd3bd48e.exe	28

memory/1260-4-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1260-10-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2496-2-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2496-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2496-22-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download