930d8e74c25506fe10310292665b6bbc8981f8bbbfff8fccd0ea56ca705425ab

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 10:34

Target

7201699037b695db11a7311a0fdd2e25.exe
Size

87KB
MD5

7201699037b695db11a7311a0fdd2e25
SHA1

54d79a7a987c350eee5d2292b0a8911bf63d2168
SHA256

930d8e74c25506fe10310292665b6bbc8981f8bbbfff8fccd0ea56ca705425ab
SHA512

e40fd9d0f3d542a5aab8bc3ccf966e5d5f41329c0af285ac256f3e685f0c727a762de3a18a348d2e50ff88c09f41c47907d038d673c04b3fd87d671e90d2b0de
SSDEEP

1536:jF5l7Vw2oWqS1nY3uyDmkbF01gny1x1C+PmWMNPNZ7tK+:D96CquY3uyDmkb7Gr+WEZ7tK+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1616	1960	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1960 wrote to memory of 1616	1960	7201699037b695db11a7311a0fdd2e25.exe	28
PID 1960 wrote to memory of 1616	1960	7201699037b695db11a7311a0fdd2e25.exe	28
PID 1960 wrote to memory of 1616	1960	7201699037b695db11a7311a0fdd2e25.exe	28
PID 1960 wrote to memory of 1616	1960	7201699037b695db11a7311a0fdd2e25.exe	28

C:\Users\Admin\AppData\Local\Temp\7201699037b695db11a7311a0fdd2e25.exe
"C:\Users\Admin\AppData\Local\Temp\7201699037b695db11a7311a0fdd2e25.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1960
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 44
  2⤵
  - Program crash
  PID:1616