be80bfaa4703164d26b528d5e1386cbb07bff55eacaa9d17be2ee7a223e89e22

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23/01/2024, 16:52

Target

7012ac01fc510be72d89030be0e08c01.exe
Size

27KB
MD5

7012ac01fc510be72d89030be0e08c01
SHA1

7b1ffe5ac147413137c8b0fda0bdc971a9d63259
SHA256

be80bfaa4703164d26b528d5e1386cbb07bff55eacaa9d17be2ee7a223e89e22
SHA512

ddb95ecae629f2652f91f050bbbf95766e9b77bcdeda307e622d6205ca356c0b212374289e84a7e892cbfbc5a3a2825e673aa38d6784ec900dab9ff72594af5d
SSDEEP

384:ea+QKhbR6XFAUotl07H+o4fQBMjw6l87voEchSU1nLFabjnfbQH:H6Rx/l07xMMCsNcb1J6q

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1476	2236	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1476	2236	7012ac01fc510be72d89030be0e08c01.exe	28
PID 2236 wrote to memory of 1476	2236	7012ac01fc510be72d89030be0e08c01.exe	28
PID 2236 wrote to memory of 1476	2236	7012ac01fc510be72d89030be0e08c01.exe	28
PID 2236 wrote to memory of 1476	2236	7012ac01fc510be72d89030be0e08c01.exe	28

C:\Users\Admin\AppData\Local\Temp\7012ac01fc510be72d89030be0e08c01.exe
"C:\Users\Admin\AppData\Local\Temp\7012ac01fc510be72d89030be0e08c01.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 44
  2⤵
  - Program crash
  PID:1476

memory/2236-0-0x0000000000520000-0x000000000053C000-memory.dmp

Filesize
112KB

Download
memory/2236-1-0x0000000000020000-0x0000000000039000-memory.dmp

Filesize
100KB

Download
memory/2236-2-0x0000000000520000-0x000000000053C000-memory.dmp

Filesize
112KB

Download