58cb9f2d93da85c2e8000a995c14de471c0fc1d01def201345f4feec1d585ade

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 23:32

Target

66527a021d2595bc3b815a8b8c7aa855.exe
Size

96KB
MD5

66527a021d2595bc3b815a8b8c7aa855
SHA1

561757b4188c707c9bad0f50191c1b6e2f833cee
SHA256

58cb9f2d93da85c2e8000a995c14de471c0fc1d01def201345f4feec1d585ade
SHA512

88b55afb4649d9abc62dac9b43f453d2314a3965e8c9bdf314c47a2c70ef949483e6e00802dd1da668b4992aa68fde4780fed10c9c5c868c94bf9ca6789117d7
SSDEEP

1536:jgQBHgf6cO/h+kGulSc16l6u+NMMl/KlYv1Tq5ThFgNIjnZuc:PrhLlu8CFFgCnQc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3044	2332	WerFault.exe	1

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2332	66527a021d2595bc3b815a8b8c7aa855.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 3044	2332	66527a021d2595bc3b815a8b8c7aa855.exe	28
PID 2332 wrote to memory of 3044	2332	66527a021d2595bc3b815a8b8c7aa855.exe	28
PID 2332 wrote to memory of 3044	2332	66527a021d2595bc3b815a8b8c7aa855.exe	28
PID 2332 wrote to memory of 3044	2332	66527a021d2595bc3b815a8b8c7aa855.exe	28

C:\Users\Admin\AppData\Local\Temp\66527a021d2595bc3b815a8b8c7aa855.exe
"C:\Users\Admin\AppData\Local\Temp\66527a021d2595bc3b815a8b8c7aa855.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2332 -s 188
  2⤵
  - Program crash
  PID:3044