4b879fee1ae486288c46bcb709fc5173ed03cf19bdbdfc94676983d16fe37e91

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 00:59

Target

73508747da0b832024980ad4ccf38bfb.exe
Size

18KB
MD5

73508747da0b832024980ad4ccf38bfb
SHA1

c35e4ab8505c178a1e0c70fe0e133bfeea142fa1
SHA256

4b879fee1ae486288c46bcb709fc5173ed03cf19bdbdfc94676983d16fe37e91
SHA512

f2fdc6c6be4adea17eb5f38d79c3d303a5a0adcf4c129524189bfdf0f563714788988e5f89c5503515c7c0d785261fb5ed4a8e6d98c94f615e9a32753be60749
SSDEEP

384:XLOgSy3pbQWXrXFjbWBCPuh3PeylbBVvkozZoSmJvdpbnkcNW5:agpZjBbWBSsWeVvkemJvdpbzW5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2232	2216	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2232	2216	73508747da0b832024980ad4ccf38bfb.exe	28
PID 2216 wrote to memory of 2232	2216	73508747da0b832024980ad4ccf38bfb.exe	28
PID 2216 wrote to memory of 2232	2216	73508747da0b832024980ad4ccf38bfb.exe	28
PID 2216 wrote to memory of 2232	2216	73508747da0b832024980ad4ccf38bfb.exe	28

C:\Users\Admin\AppData\Local\Temp\73508747da0b832024980ad4ccf38bfb.exe
"C:\Users\Admin\AppData\Local\Temp\73508747da0b832024980ad4ccf38bfb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 36
  2⤵
  - Program crash
  PID:2232

memory/2216-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2216-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download