240ae7f1e316a532286bd07bdc3a4d6e6b810bb5a4672c6c09f467f6fe345835

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:48

Target

750220ecb8e268aa05469039c29da633.exe
Size

184KB
MD5

750220ecb8e268aa05469039c29da633
SHA1

7e294e628ccd8a8d0426a4f67c01f77b484732db
SHA256

240ae7f1e316a532286bd07bdc3a4d6e6b810bb5a4672c6c09f467f6fe345835
SHA512

f4ad61a6f5ed643261ab5250c78d6fe8c3b0686318346f5e8e5d9c53777561948610b6b3aafcce94592688447b470a05867711c6371ddc5b83fa5588e3c2f04b
SSDEEP

3072:qvPoomwyoVwQPOjuo3QwGJcLIzXMrofFI0xv+ED9ulPGpFr:qvgoR2QPJogwGJgG5JulPGpF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2276 2512 WerFault.exe 750220ecb8e268aa05469039c29da633.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

750220ecb8e268aa05469039c29da633.exe

pid process

2512 750220ecb8e268aa05469039c29da633.exe

pid	pid_target	process	target process
2276	2512	WerFault.exe	750220ecb8e268aa05469039c29da633.exe

pid	process
2512	750220ecb8e268aa05469039c29da633.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

750220ecb8e268aa05469039c29da633.exe

description	pid	process	target process
PID 2512 wrote to memory of 2276	2512	750220ecb8e268aa05469039c29da633.exe	WerFault.exe
PID 2512 wrote to memory of 2276	2512	750220ecb8e268aa05469039c29da633.exe	WerFault.exe
PID 2512 wrote to memory of 2276	2512	750220ecb8e268aa05469039c29da633.exe	WerFault.exe
PID 2512 wrote to memory of 2276	2512	750220ecb8e268aa05469039c29da633.exe	WerFault.exe

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 244
2⤵
- Program crash
PID:2276