813792eb8c9feb9fd58e690d8ad386d418a1ae7f0f2772d16ceb1b3724ff7711

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/01/2024, 09:23

Target

5890c22cb88cc16123542038aad39f53.exe
Size

388KB
MD5

5890c22cb88cc16123542038aad39f53
SHA1

094f9cca1c7acdd9410f72229614d1b429763c13
SHA256

813792eb8c9feb9fd58e690d8ad386d418a1ae7f0f2772d16ceb1b3724ff7711
SHA512

756776b5d0dc3ab4a59bd8503d0a3cc58fe2740291a38d226ffa79116f3b6cc5e71f318fa8aba7fd243ce4b2e047baa667435241f3fef690e31730bccefc935b
SSDEEP

3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIUU+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwIUU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2244	2268	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2244	2268	5890c22cb88cc16123542038aad39f53.exe	29
PID 2268 wrote to memory of 2244	2268	5890c22cb88cc16123542038aad39f53.exe	29
PID 2268 wrote to memory of 2244	2268	5890c22cb88cc16123542038aad39f53.exe	29
PID 2268 wrote to memory of 2244	2268	5890c22cb88cc16123542038aad39f53.exe	29

C:\Users\Admin\AppData\Local\Temp\5890c22cb88cc16123542038aad39f53.exe
"C:\Users\Admin\AppData\Local\Temp\5890c22cb88cc16123542038aad39f53.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 100
  2⤵
  - Program crash
  PID:2244