27d5214bdf7eeae0a8b9ed39b158573c296df5676baafda26787cc14110cdd5e

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 06:51

Target

4abbaf3ff1e22fe75bec4a1acecbca2f.exe
Size

100KB
MD5

4abbaf3ff1e22fe75bec4a1acecbca2f
SHA1

ab4cf28561986e6eb1049e624e2cea5385cdb820
SHA256

27d5214bdf7eeae0a8b9ed39b158573c296df5676baafda26787cc14110cdd5e
SHA512

cbc2c60121fb5a9e87b7cdb9c77892a6cf045eda5b935b54e1be7a7c7c9ba8fac6be080a6e0342c94940e641efee10b78d2f6424391267718618c8348c86256a
SSDEEP

1536:CFo+gaxzVZwTKcP0tucVdkjj9N2odeKuuJZTfA0zj2JZnW6pBp:yo+gaJDwT3M3dYbdeKhvBoJjp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1996	2356	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 1996	2356	4abbaf3ff1e22fe75bec4a1acecbca2f.exe	16
PID 2356 wrote to memory of 1996	2356	4abbaf3ff1e22fe75bec4a1acecbca2f.exe	16
PID 2356 wrote to memory of 1996	2356	4abbaf3ff1e22fe75bec4a1acecbca2f.exe	16
PID 2356 wrote to memory of 1996	2356	4abbaf3ff1e22fe75bec4a1acecbca2f.exe	16

C:\Users\Admin\AppData\Local\Temp\4abbaf3ff1e22fe75bec4a1acecbca2f.exe
"C:\Users\Admin\AppData\Local\Temp\4abbaf3ff1e22fe75bec4a1acecbca2f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 36
  2⤵
  - Program crash
  PID:1996

memory/2356-0-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download