6c0500777810d95ae34a634c1da09e433b25afc74bbff209191d8007a1dbabfa

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 00:26

Target

54fd18487036ed920ba2c709d0e08140.exe
Size

31KB
MD5

54fd18487036ed920ba2c709d0e08140
SHA1

0707aa6fd56eed8ca99ae3dd05b706beaacc3a01
SHA256

6c0500777810d95ae34a634c1da09e433b25afc74bbff209191d8007a1dbabfa
SHA512

03466f76717c1ba8a7bcbb73fe41f7334e1c81bd4b1086a5beda4a83ccd416ec4f87c6692f9a84281d8c2ff2ced9664c2ef4f1ab140828241a146e262e18ce83
SSDEEP

768:P1Yx7TzWB4iyfTeiZiVWShwE0nj0L7rTLu9fgUV:iJ1nE0j8rTa9L

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2160	1996	WerFault.exe	27

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1996	54fd18487036ed920ba2c709d0e08140.exe
1996	54fd18487036ed920ba2c709d0e08140.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1340	1996	54fd18487036ed920ba2c709d0e08140.exe	17
PID 1996 wrote to memory of 1340	1996	54fd18487036ed920ba2c709d0e08140.exe	17
PID 1996 wrote to memory of 1340	1996	54fd18487036ed920ba2c709d0e08140.exe	17
PID 1996 wrote to memory of 1340	1996	54fd18487036ed920ba2c709d0e08140.exe	17
PID 1996 wrote to memory of 2160	1996	54fd18487036ed920ba2c709d0e08140.exe	28
PID 1996 wrote to memory of 2160	1996	54fd18487036ed920ba2c709d0e08140.exe	28
PID 1996 wrote to memory of 2160	1996	54fd18487036ed920ba2c709d0e08140.exe	28
PID 1996 wrote to memory of 2160	1996	54fd18487036ed920ba2c709d0e08140.exe	28

memory/1340-1-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1340-5-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1996-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1996-4-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1996-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download