12283af47e9d7b78e797bd52f36a8e82d25b7a4a9ea2f5aab2c770821ef914ee

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 12:59

Target

74c27570314456a9edab661b992bc57e.exe
Size

132KB
MD5

74c27570314456a9edab661b992bc57e
SHA1

9dba57622aabff44a0b2a4274255e58449e02160
SHA256

12283af47e9d7b78e797bd52f36a8e82d25b7a4a9ea2f5aab2c770821ef914ee
SHA512

5edb776d4d4d25cadd1d04bbbc30c1bbd45ba6828b4c2621328e34916281291742d9f78e4d40e37482ece695923eae94159d1f63e6aa27a0735242d8ec8450c1
SSDEEP

1536:3AcdDCn+toSGUs6BDUFN9yPNBCWlYRKi/7yQe96smlUWd5pNUFNqOwyZ87NjFXTJ:31wOoZQJUFN0NUWYRv/7yLK7Q9yl1I0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2132	2268	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2132	2268	74c27570314456a9edab661b992bc57e.exe	28
PID 2268 wrote to memory of 2132	2268	74c27570314456a9edab661b992bc57e.exe	28
PID 2268 wrote to memory of 2132	2268	74c27570314456a9edab661b992bc57e.exe	28
PID 2268 wrote to memory of 2132	2268	74c27570314456a9edab661b992bc57e.exe	28

C:\Users\Admin\AppData\Local\Temp\74c27570314456a9edab661b992bc57e.exe
"C:\Users\Admin\AppData\Local\Temp\74c27570314456a9edab661b992bc57e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 36
  2⤵
  - Program crash
  PID:2132

memory/2268-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download