74c7236dea30033f41ad600a07ff1c6976d41d941130eca84fc0f4d67cb1a093

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 01:34

Target

HesapEkstresi_08012024_13014688_3871782_MY_2.exe
Size

669KB
MD5

cb17689f9f2f8ead0450a9fa21ea6920
SHA1

44f2a04f059e94ce47a2da8ed0b175a97e20ddde
SHA256

390742120fc89ba2735772dbb63c0998bdb2d26df99976a5406477c4ffab56c2
SHA512

43d729df8acf4eb2fe56c7432835340214b571a942e12566eef1eab656b7c1e263d3ac6b76087757034294382c90f1f53d3c9b8c83e80783fc868e94e916c76b
SSDEEP

12288:Pz1uPBa5rr1wAM1F0XtZFBlZMMDcrKJSja7kaGPASF:Pua5rvM1FqnFBnMMDTSyoASF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2756	2636	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 2756	2636	HesapEkstresi_08012024_13014688_3871782_MY_2.exe	28
PID 2636 wrote to memory of 2756	2636	HesapEkstresi_08012024_13014688_3871782_MY_2.exe	28
PID 2636 wrote to memory of 2756	2636	HesapEkstresi_08012024_13014688_3871782_MY_2.exe	28
PID 2636 wrote to memory of 2756	2636	HesapEkstresi_08012024_13014688_3871782_MY_2.exe	28

C:\Users\Admin\AppData\Local\Temp\HesapEkstresi_08012024_13014688_3871782_MY_2.exe
"C:\Users\Admin\AppData\Local\Temp\HesapEkstresi_08012024_13014688_3871782_MY_2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2636 -s 656
  2⤵
  - Program crash
  PID:2756

memory/2636-0-0x0000000000320000-0x00000000003CE000-memory.dmp

Filesize
696KB

Download
memory/2636-1-0x0000000074AC0000-0x00000000751AE000-memory.dmp

Filesize
6.9MB

Download
memory/2636-2-0x0000000004EC0000-0x0000000004F00000-memory.dmp

Filesize
256KB

Download
memory/2636-3-0x0000000000420000-0x000000000043A000-memory.dmp

Filesize
104KB

Download
memory/2636-4-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/2636-5-0x0000000074AC0000-0x00000000751AE000-memory.dmp

Filesize
6.9MB

Download
memory/2636-6-0x0000000004EC0000-0x0000000004F00000-memory.dmp

Filesize
256KB

Download