229972d209a4961c35b5518657206b6576f838b334bf8f3fe13f02dce821ab71

Analysis

max time kernel
117s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:03

Target

74ec9642b724bfa78cf53c82306dd034.exe
Size

25KB
MD5

74ec9642b724bfa78cf53c82306dd034
SHA1

24413933714fe0d8209417855ae9793ee141aab6
SHA256

229972d209a4961c35b5518657206b6576f838b334bf8f3fe13f02dce821ab71
SHA512

30ec4b85ae3a1413c4fca3f17c2f84a5434e1ac6531fb5a79ad34a4009ebd3153705f0a18e633b2f3487be244ff7068d23740377ccbbc286b5c674fac06475f7
SSDEEP

384:F/Y38lr+DC17PY7hvcvAWAmTBcqlGhB2n+LFkFYil4ZbmApegQYDC1:F/YMxN7KQAmTBcqlGhBLBkFYil5AAH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2648 2348 WerFault.exe 74ec9642b724bfa78cf53c82306dd034.exe

pid	pid_target	process	target process
2648	2348	WerFault.exe	74ec9642b724bfa78cf53c82306dd034.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

74ec9642b724bfa78cf53c82306dd034.exe

description	pid	process	target process
PID 2348 wrote to memory of 2648	2348	74ec9642b724bfa78cf53c82306dd034.exe	WerFault.exe
PID 2348 wrote to memory of 2648	2348	74ec9642b724bfa78cf53c82306dd034.exe	WerFault.exe
PID 2348 wrote to memory of 2648	2348	74ec9642b724bfa78cf53c82306dd034.exe	WerFault.exe
PID 2348 wrote to memory of 2648	2348	74ec9642b724bfa78cf53c82306dd034.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\74ec9642b724bfa78cf53c82306dd034.exe
"C:\Users\Admin\AppData\Local\Temp\74ec9642b724bfa78cf53c82306dd034.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 36
2⤵
- Program crash
PID:2648