7280722cc746de67bbef86c26ef9412a40b4c66c821abc93f59d65a878dd85db

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06-01-2024 13:18

Target

46542b85b8d1ef9d5bd57efde6e94721.exe
Size

330KB
MD5

46542b85b8d1ef9d5bd57efde6e94721
SHA1

fd2db07aed25eb91134e948fc36b890b61d69eb5
SHA256

7280722cc746de67bbef86c26ef9412a40b4c66c821abc93f59d65a878dd85db
SHA512

9db4fe247f37bf03937150e5146a613af92ff2a8a281cc04243f7e75786ca8256ba26756899b4597dfc1e0b2fc2ae0671f0d9176359880eb972119197a840919
SSDEEP

3072:1Ei1V0Q/O3ztQAybdJHVM7KXPfteUu8/He4/DXtGRKaaDrQp9c:2OKZybdJ1XPFeUHtGw1Ep

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2196	1932	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 2196	1932	46542b85b8d1ef9d5bd57efde6e94721.exe	28
PID 1932 wrote to memory of 2196	1932	46542b85b8d1ef9d5bd57efde6e94721.exe	28
PID 1932 wrote to memory of 2196	1932	46542b85b8d1ef9d5bd57efde6e94721.exe	28
PID 1932 wrote to memory of 2196	1932	46542b85b8d1ef9d5bd57efde6e94721.exe	28

C:\Users\Admin\AppData\Local\Temp\46542b85b8d1ef9d5bd57efde6e94721.exe
"C:\Users\Admin\AppData\Local\Temp\46542b85b8d1ef9d5bd57efde6e94721.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 44
  2⤵
  - Program crash
  PID:2196