30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d

Analysis

max time kernel
122s
max time network
143s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 02:30

Target

30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe
Size

5KB
MD5

05b0fdfa930ec31fcbe3684f0a13db42
SHA1

c758816e13eb4a61682b7a1d62818a0d97c398ac
SHA256

30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d
SHA512

28bdf7680449497391b8c3fd63a9e3d8a45caefabbf0e42b501222c9fcceec17e4520700c7a8d14561cb3d4dc311f02aca71a02682a3760951e42274a4a4953e
SSDEEP

48:S0lXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tsRuqSxp:RWLkFfNnOKYloIQ2pm2pbYSIxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2924	2300	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2924	2300	30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe	29
PID 2300 wrote to memory of 2924	2300	30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe	29
PID 2300 wrote to memory of 2924	2300	30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe	29
PID 2300 wrote to memory of 2924	2300	30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe	29

C:\Users\Admin\AppData\Local\Temp\30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe
"C:\Users\Admin\AppData\Local\Temp\30cdf93b8a9861784b37004e290920abd3c2f13674060388587f4464f169fc7d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2300 -s 48
  2⤵
  - Program crash
  PID:2924