4fae0c181e7de5e8abcd6b0934dd077fb5f802a5e5353cb2ef6fd636efdc51e6

Analysis

max time kernel
152s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 15:03

Target

56c8017590f367495c710a23b77d977b.exe
Size

100KB
MD5

56c8017590f367495c710a23b77d977b
SHA1

76ea536c8aeaacad7453e5fe98994d6c43766fac
SHA256

4fae0c181e7de5e8abcd6b0934dd077fb5f802a5e5353cb2ef6fd636efdc51e6
SHA512

4b3a3964a487be4329bb4518f437740dbbb8531f28cc13ab6912fe149b6fea451d3a1e805813b4fde855a710960d02f10b2215037c4549f96fc6d9abf2ccb01e
SSDEEP

1536:FNfV3Iyaepqt2Wr9k6smgEFTyj3yyEx8+9v3BZUlURDoq4OZZZLlCIiba:dIW02Wp8dGmj3yp2+dBZU6RD68wb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2672	2136	WerFault.exe	6

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2672	2136	56c8017590f367495c710a23b77d977b.exe	27
PID 2136 wrote to memory of 2672	2136	56c8017590f367495c710a23b77d977b.exe	27
PID 2136 wrote to memory of 2672	2136	56c8017590f367495c710a23b77d977b.exe	27
PID 2136 wrote to memory of 2672	2136	56c8017590f367495c710a23b77d977b.exe	27

C:\Users\Admin\AppData\Local\Temp\56c8017590f367495c710a23b77d977b.exe
"C:\Users\Admin\AppData\Local\Temp\56c8017590f367495c710a23b77d977b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 92
  2⤵
  - Program crash
  PID:2672

memory/2136-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download