951cbf1dd1af930a6769d671102c609b571cad0efeaf5f245484a1b033e060bb

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 21:24

Target

4c7d84844853604a1c8e88e6ff46b542.exe
Size

7KB
MD5

4c7d84844853604a1c8e88e6ff46b542
SHA1

f270c71a807fe67bdebf977efe74cb73731735fa
SHA256

951cbf1dd1af930a6769d671102c609b571cad0efeaf5f245484a1b033e060bb
SHA512

4c61fab2c70a303cfaaa9ba8548e0419fbe7eb8e0950d89522898e8c9e0ec624dfe1d5b0266be2c61e02ece501ed689894a2c754b7af44a353c27b9e19870c74
SSDEEP

96:SEm49vsW+053nT4JtBSC9Qz2AiSGVB4V/UcJZxZG/efaVAxFxNzLC:249El053T4JSyPSGV+V/FZxZGeJK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2324	1048	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 2324	1048	4c7d84844853604a1c8e88e6ff46b542.exe	28
PID 1048 wrote to memory of 2324	1048	4c7d84844853604a1c8e88e6ff46b542.exe	28
PID 1048 wrote to memory of 2324	1048	4c7d84844853604a1c8e88e6ff46b542.exe	28
PID 1048 wrote to memory of 2324	1048	4c7d84844853604a1c8e88e6ff46b542.exe	28

C:\Users\Admin\AppData\Local\Temp\4c7d84844853604a1c8e88e6ff46b542.exe
"C:\Users\Admin\AppData\Local\Temp\4c7d84844853604a1c8e88e6ff46b542.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1048 -s 36
  2⤵
  - Program crash
  PID:2324