c234579fb05ff2569eebd84466dc08eff90ee4061b088bc68358c7768e29cd15

Analysis

max time kernel
142s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 03:55

Target

4d4549a83e7c0ad18a7a25ca78421eb5.exe
Size

1.9MB
MD5

4d4549a83e7c0ad18a7a25ca78421eb5
SHA1

ff3360b45ef5fb9b97fe072d3926ea1fe3624f8c
SHA256

c234579fb05ff2569eebd84466dc08eff90ee4061b088bc68358c7768e29cd15
SHA512

4950ccabd6559c52706fc374675cecd37e49ef2fe167dd84c17d001097e1ba17090d1c9400b4f973fba2ec43a50e046a6f7fb4867884177e35f32b87405cc2b2
SSDEEP

49152:SZTTHvfp3dEfhhSOuDfg/08c6wlVjEuMBqKEdNwUI7mD6RSf:SZ/PNdEfSOur60OwlVQuuqFACDJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2784	2132	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2132 wrote to memory of 2784	2132	4d4549a83e7c0ad18a7a25ca78421eb5.exe	15
PID 2132 wrote to memory of 2784	2132	4d4549a83e7c0ad18a7a25ca78421eb5.exe	15
PID 2132 wrote to memory of 2784	2132	4d4549a83e7c0ad18a7a25ca78421eb5.exe	15
PID 2132 wrote to memory of 2784	2132	4d4549a83e7c0ad18a7a25ca78421eb5.exe	15

C:\Users\Admin\AppData\Local\Temp\4d4549a83e7c0ad18a7a25ca78421eb5.exe
"C:\Users\Admin\AppData\Local\Temp\4d4549a83e7c0ad18a7a25ca78421eb5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2132
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2132 -s 192
  2⤵
  - Program crash
  PID:2784

memory/2132-0-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/2132-1-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download