219346f426ee93058c5b819a84fb70b2879349dcdc5dc07ce234ab73b87e52da

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 17:24

Target

570f05bbf555913ee4188e7838f354b1.exe
Size

21KB
MD5

570f05bbf555913ee4188e7838f354b1
SHA1

233f5889bec03a1f1d8644ba50ad077d714c81d2
SHA256

219346f426ee93058c5b819a84fb70b2879349dcdc5dc07ce234ab73b87e52da
SHA512

c4210b75dac87c3eeceb61d45e966110f657b68c0060b712be8d7c4c9fb3995d7a0ef612699e3d5f44ab1087349dbc27669f8f85c0347510edd1130f31056e33
SSDEEP

384:nZJM1FEfQHSc7yFKyEggd0uxtZIzUEJapGLawxYM5iWMZ:nLMsrc73gglxtZPEJfT5IZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2924	2136	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2924	2136	570f05bbf555913ee4188e7838f354b1.exe	9
PID 2136 wrote to memory of 2924	2136	570f05bbf555913ee4188e7838f354b1.exe	9
PID 2136 wrote to memory of 2924	2136	570f05bbf555913ee4188e7838f354b1.exe	9
PID 2136 wrote to memory of 2924	2136	570f05bbf555913ee4188e7838f354b1.exe	9

C:\Users\Admin\AppData\Local\Temp\570f05bbf555913ee4188e7838f354b1.exe
"C:\Users\Admin\AppData\Local\Temp\570f05bbf555913ee4188e7838f354b1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 148
  2⤵
  - Program crash
  PID:2924

memory/2136-0-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download