33f03d68fe0768e38992f59c7831e80e92597ea5464d61f42a9cf79a93cd0031

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 04:11

Target

4d4d5f37b49144bc0884310dd3da3e23.exe
Size

53KB
MD5

4d4d5f37b49144bc0884310dd3da3e23
SHA1

74ce23a4bccc0200ea63e75741394d48dbefcdc5
SHA256

33f03d68fe0768e38992f59c7831e80e92597ea5464d61f42a9cf79a93cd0031
SHA512

537af4ee92af6f49902d4390494a7c9e1793ccccc679330bff9ec75a27ccb88f5d2ee1d7599dd28fbce969fb4dd3951f9822e6479607fe016d16d31f881b9399
SSDEEP

768:UPrOyA8SsDDmaMLqerApEQJogc2Il1Krv6xbPRc0G9RLGo9fWXKABNTLL57xmpTq:z8NWLG3pnI3K761P200D2yp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2380	2248	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2380	2248	4d4d5f37b49144bc0884310dd3da3e23.exe	28
PID 2248 wrote to memory of 2380	2248	4d4d5f37b49144bc0884310dd3da3e23.exe	28
PID 2248 wrote to memory of 2380	2248	4d4d5f37b49144bc0884310dd3da3e23.exe	28
PID 2248 wrote to memory of 2380	2248	4d4d5f37b49144bc0884310dd3da3e23.exe	28

C:\Users\Admin\AppData\Local\Temp\4d4d5f37b49144bc0884310dd3da3e23.exe
"C:\Users\Admin\AppData\Local\Temp\4d4d5f37b49144bc0884310dd3da3e23.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 92
  2⤵
  - Program crash
  PID:2380