7e51ae0618522930e3fce21f4085a0e6bd3c85f517a00fb927a7e7c60be902b5

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 04:55

Target

7180b7e25a0631d06720b1fe86191f59.exe
Size

31KB
MD5

7180b7e25a0631d06720b1fe86191f59
SHA1

82eba5b0e32b8df2d0e09cda2f360892693306fd
SHA256

7e51ae0618522930e3fce21f4085a0e6bd3c85f517a00fb927a7e7c60be902b5
SHA512

38a1689ae9be9681750156688ac104e07ce9ab9ec737729b18ccec440a49b0f704b4ca88178b7688609d54668f5ed77be00e4e60e1c03789c9a652abc8cd8537
SSDEEP

384:YfuB87EwseOvnnmDok+us4ZHTs8Vo9ZbtDBz8GjpCpQ23ux:Yw87ENeOJknt59eVtBz8G0pQrx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2196	2040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 2196	2040	7180b7e25a0631d06720b1fe86191f59.exe	28
PID 2040 wrote to memory of 2196	2040	7180b7e25a0631d06720b1fe86191f59.exe	28
PID 2040 wrote to memory of 2196	2040	7180b7e25a0631d06720b1fe86191f59.exe	28
PID 2040 wrote to memory of 2196	2040	7180b7e25a0631d06720b1fe86191f59.exe	28

C:\Users\Admin\AppData\Local\Temp\7180b7e25a0631d06720b1fe86191f59.exe
"C:\Users\Admin\AppData\Local\Temp\7180b7e25a0631d06720b1fe86191f59.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 148
  2⤵
  - Program crash
  PID:2196

memory/2040-0-0x0000000000400000-0x000000000040588C-memory.dmp

Filesize
22KB

Download