3f292253f6843df8401dd24925531d23f2f8a073d1f7ca2ecbcb52c0a948445b

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 01:37

Target

426f4ef3e1b7b5f295220910f69002b6.exe
Size

369KB
MD5

426f4ef3e1b7b5f295220910f69002b6
SHA1

660218fea467fb8930d9a01cfb7d6bf169fd6bf8
SHA256

3f292253f6843df8401dd24925531d23f2f8a073d1f7ca2ecbcb52c0a948445b
SHA512

4a1153b1aea014e62ed42239516a5db331c914f186f99633b189eebeee2928f14c88bcbaf5d5199c13fc95f8fe6677fb3edf9fbcf796f63f2b57a25482d35ac9
SSDEEP

6144:JFsIDjUsdomc5dBdMgJSzQfmelrhQB2QaGgWxuxfb8xx5AKkn+99EmwaPv2j:P9do1SgJSzQfmellQBqNWMxf8x5AKk+w

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2200	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2200	2436	426f4ef3e1b7b5f295220910f69002b6.exe	28
PID 2436 wrote to memory of 2200	2436	426f4ef3e1b7b5f295220910f69002b6.exe	28
PID 2436 wrote to memory of 2200	2436	426f4ef3e1b7b5f295220910f69002b6.exe	28
PID 2436 wrote to memory of 2200	2436	426f4ef3e1b7b5f295220910f69002b6.exe	28

C:\Users\Admin\AppData\Local\Temp\426f4ef3e1b7b5f295220910f69002b6.exe
"C:\Users\Admin\AppData\Local\Temp\426f4ef3e1b7b5f295220910f69002b6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 192
  2⤵
  - Program crash
  PID:2200

memory/2436-0-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download