0326c52ec0ef59a39952f80133ad7c6fe9ebd57bcf45c211444d6a3fa80bc2a9

Analysis

max time kernel
120s
max time network
147s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 18:42

Target

4eeb5a8c6a386d1fe53452ffc8c233e5.exe
Size

18KB
MD5

4eeb5a8c6a386d1fe53452ffc8c233e5
SHA1

d3bb3f7eb44c028399d4d895f80954d123da796e
SHA256

0326c52ec0ef59a39952f80133ad7c6fe9ebd57bcf45c211444d6a3fa80bc2a9
SHA512

e0332944ce7a6d6a05bcecf3476628b3988702825b7b2604d622cc1680ff056b11125738d726e6ef082082ab5f73ce7e84fee7a95acedf8ae318c542e6a15eb6
SSDEEP

384:RHWn2KQDCf/E8re553885bTU6o2mvcZVoLxk+LJ7Y8ht0p30VMtmLRO:FWZTA55s85bTUv2YcDoXLt0p30GtmlO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2868	2516	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 2868	2516	4eeb5a8c6a386d1fe53452ffc8c233e5.exe	18
PID 2516 wrote to memory of 2868	2516	4eeb5a8c6a386d1fe53452ffc8c233e5.exe	18
PID 2516 wrote to memory of 2868	2516	4eeb5a8c6a386d1fe53452ffc8c233e5.exe	18
PID 2516 wrote to memory of 2868	2516	4eeb5a8c6a386d1fe53452ffc8c233e5.exe	18

C:\Users\Admin\AppData\Local\Temp\4eeb5a8c6a386d1fe53452ffc8c233e5.exe
"C:\Users\Admin\AppData\Local\Temp\4eeb5a8c6a386d1fe53452ffc8c233e5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 36
  2⤵
  - Program crash
  PID:2868