75f3a2c8ffc7d4e2e37ef6d6501f0a957c4704650fc61c47636fd817aa5b40d3

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 18:37

Target

753930daeb2b5edef38d060883350418.exe
Size

102KB
MD5

753930daeb2b5edef38d060883350418
SHA1

94ee3b86aa01a7c99726db37e09b18d382339b72
SHA256

75f3a2c8ffc7d4e2e37ef6d6501f0a957c4704650fc61c47636fd817aa5b40d3
SHA512

b240b70a245041b4ebebe805ab8e1dcda5a7a22cfba3e871c0992f691a39882b18226c08d80737e108038be474e27bdcd22a80f1721ea37c89badb3cf9a47de2
SSDEEP

3072:+uvHDBuV8p0ArqJ2QvoH6Iqk+cD1blGGJ+U2mKNS8eDb2S:TvHDMIg2H6IzPxbl9+Ns8ePF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2392	2508	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2508 wrote to memory of 2392	2508	753930daeb2b5edef38d060883350418.exe	28
PID 2508 wrote to memory of 2392	2508	753930daeb2b5edef38d060883350418.exe	28
PID 2508 wrote to memory of 2392	2508	753930daeb2b5edef38d060883350418.exe	28
PID 2508 wrote to memory of 2392	2508	753930daeb2b5edef38d060883350418.exe	28

C:\Users\Admin\AppData\Local\Temp\753930daeb2b5edef38d060883350418.exe
"C:\Users\Admin\AppData\Local\Temp\753930daeb2b5edef38d060883350418.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2508 -s 36
  2⤵
  - Program crash
  PID:2392

memory/2508-0-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download
memory/2508-1-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download