60df71e9c8e080db0258ea03200f164cdd08c32d86cd33f0e94525139230f354

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23/01/2024, 21:15

Target

7093c6cc9171cd967f162f8cb6528c58.exe
Size

31KB
MD5

7093c6cc9171cd967f162f8cb6528c58
SHA1

b629b63a060a60c40acc4a21c3c6028b0c9bee84
SHA256

60df71e9c8e080db0258ea03200f164cdd08c32d86cd33f0e94525139230f354
SHA512

e5e35350989a507485781804dd3f77ea3e1312665e321b7e8b56515b360284b713b6a87644a582c8f91e856139f0ab4559920f7a9d72681526bb3298f1521448
SSDEEP

768:aGoMByKL3dgFo/vdWCFsLUds4rkiUbObT3+T29qB6HpzJ:4u/3Ao/4gsL8oVbySKYB6j

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2164	2144	WerFault.exe	20

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2144 wrote to memory of 2164	2144	7093c6cc9171cd967f162f8cb6528c58.exe	28
PID 2144 wrote to memory of 2164	2144	7093c6cc9171cd967f162f8cb6528c58.exe	28
PID 2144 wrote to memory of 2164	2144	7093c6cc9171cd967f162f8cb6528c58.exe	28
PID 2144 wrote to memory of 2164	2144	7093c6cc9171cd967f162f8cb6528c58.exe	28

C:\Users\Admin\AppData\Local\Temp\7093c6cc9171cd967f162f8cb6528c58.exe
"C:\Users\Admin\AppData\Local\Temp\7093c6cc9171cd967f162f8cb6528c58.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2144
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 36
  2⤵
  - Program crash
  PID:2164

memory/2144-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download