708f68b143db773523d27ffeffed1384889a7b697cb34993d8c73959c619ffd0

Resubmissions

25-01-2024 18:00

25-01-2024 17:55

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 18:00

Target

75256c485cded57213f2bc9f1aaa155a.exe
Size

93KB
MD5

75256c485cded57213f2bc9f1aaa155a
SHA1

93dafd4bb10ed07c01be84e5aa94d03bebd0bcac
SHA256

708f68b143db773523d27ffeffed1384889a7b697cb34993d8c73959c619ffd0
SHA512

a8a5a3451179c8dc7fabfb723885bfa546b3d4cfd7e25dcf8fc4930f7272621fef9e9bfe26c9bdec7a9754e68ddf9cd3d22257b81359d1cf8bbdb1d887af570c
SSDEEP

1536:rDq935C9v7MP+NZlGjsE57dg144cLm8Y13LX/2U9cmPN3o6g:rDq93my0lGx57dg144clY1b+U9NN3oH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2840	2836	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2836 wrote to memory of 2840	2836	75256c485cded57213f2bc9f1aaa155a.exe	28
PID 2836 wrote to memory of 2840	2836	75256c485cded57213f2bc9f1aaa155a.exe	28
PID 2836 wrote to memory of 2840	2836	75256c485cded57213f2bc9f1aaa155a.exe	28
PID 2836 wrote to memory of 2840	2836	75256c485cded57213f2bc9f1aaa155a.exe	28

C:\Users\Admin\AppData\Local\Temp\75256c485cded57213f2bc9f1aaa155a.exe
"C:\Users\Admin\AppData\Local\Temp\75256c485cded57213f2bc9f1aaa155a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 36
  2⤵
  - Program crash
  PID:2840