bbdb7f1d7a96f122595ed9293fa31af6add76a1513d6eb32162d48ee6a8f3312

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
17/01/2024, 21:39

Target

63ac1444b164ae28ef7c996366fdc494.exe
Size

499KB
MD5

63ac1444b164ae28ef7c996366fdc494
SHA1

eb9cad0820590a955cf3b9d37eaf25049279545e
SHA256

bbdb7f1d7a96f122595ed9293fa31af6add76a1513d6eb32162d48ee6a8f3312
SHA512

d20557f79ed85626dae7bf85c82d9384263be2ee75f7b62e8c902d36b207229aa0866600275ddd911c81de85f2b3b889c404d27d92d1e8ede467500b1efda961
SSDEEP

12288:9Gf4LJX4zRiiGFxmfNJ6El+nsjOQGRLNtTirdLybMq:9pX4zR3gxMi2+sfGR7TEdLybR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
904	3328	WerFault.exe	84

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3328 wrote to memory of 2404	3328	63ac1444b164ae28ef7c996366fdc494.exe	89
PID 3328 wrote to memory of 2404	3328	63ac1444b164ae28ef7c996366fdc494.exe	89

C:\Users\Admin\AppData\Local\Temp\63ac1444b164ae28ef7c996366fdc494.exe
"C:\Users\Admin\AppData\Local\Temp\63ac1444b164ae28ef7c996366fdc494.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3328
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe" ¨Á
  2⤵
  PID:2404
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3328 -s 620
  2⤵
  - Program crash
  PID:904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3328 -ip 3328
1⤵
PID:4288

memory/3328-0-0x0000000000400000-0x00000000004F2000-memory.dmp

Filesize
968KB

Download
memory/3328-1-0x0000000000810000-0x0000000000853000-memory.dmp

Filesize
268KB

Download
memory/3328-2-0x00000000024D0000-0x00000000024D1000-memory.dmp

Filesize
4KB

Download
memory/3328-10-0x00000000024F0000-0x00000000024F1000-memory.dmp

Filesize
4KB

Download
memory/3328-11-0x00000000027D0000-0x00000000027D1000-memory.dmp

Filesize
4KB

Download
memory/3328-9-0x0000000002550000-0x0000000002551000-memory.dmp

Filesize
4KB

Download
memory/3328-8-0x0000000002570000-0x0000000002571000-memory.dmp

Filesize
4KB

Download
memory/3328-7-0x0000000002560000-0x0000000002561000-memory.dmp

Filesize
4KB

Download
memory/3328-6-0x0000000002520000-0x0000000002528000-memory.dmp

Filesize
32KB

Download
memory/3328-5-0x00000000024B0000-0x00000000024B1000-memory.dmp

Filesize
4KB

Download
memory/3328-4-0x0000000000800000-0x0000000000801000-memory.dmp

Filesize
4KB

Download
memory/3328-3-0x0000000000870000-0x0000000000871000-memory.dmp

Filesize
4KB

Download
memory/3328-12-0x0000000000400000-0x00000000004F2000-memory.dmp

Filesize
968KB

Download
memory/3328-13-0x0000000000810000-0x0000000000853000-memory.dmp

Filesize
268KB

Download