77efef452ec309b0fba5a3e2899771f0bc112b3fd3ac83d74b32a73ce9e63086

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 20:23

Target

756ef6053e693c0179d93fc9021aaacd.exe
Size

100KB
MD5

756ef6053e693c0179d93fc9021aaacd
SHA1

bb5c6eac1b4b229a3b5d37965d3b696b8a14c94c
SHA256

77efef452ec309b0fba5a3e2899771f0bc112b3fd3ac83d74b32a73ce9e63086
SHA512

a8da11707ad48767ea9055e56e8389f1d3004e812f10b4a76f0d0ede2539264f04a827e9633673bf6980340b08274e04594686b9fdda064bf9e67f4724ef5d4e
SSDEEP

1536:OHjhRlSFstr9dC8v8lr4aLx/Dxzg0kXTRNUWD2B85qPNlBC+TYWYm:qjeWdC8vRkx/FkbSWC+aN6sYVm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2708	2328	WerFault.exe	27

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2328	756ef6053e693c0179d93fc9021aaacd.exe
2328	756ef6053e693c0179d93fc9021aaacd.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2708	2328	756ef6053e693c0179d93fc9021aaacd.exe	28
PID 2328 wrote to memory of 2708	2328	756ef6053e693c0179d93fc9021aaacd.exe	28
PID 2328 wrote to memory of 2708	2328	756ef6053e693c0179d93fc9021aaacd.exe	28
PID 2328 wrote to memory of 2708	2328	756ef6053e693c0179d93fc9021aaacd.exe	28

C:\Users\Admin\AppData\Local\Temp\756ef6053e693c0179d93fc9021aaacd.exe
"C:\Users\Admin\AppData\Local\Temp\756ef6053e693c0179d93fc9021aaacd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 248
  2⤵
  - Program crash
  PID:2708

memory/2328-0-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download
memory/2328-2-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download