709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5

Analysis

max time kernel
121s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 00:32

Target

709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe
Size

5KB
MD5

f5776a016d2d8da77662ec4006402705
SHA1

ff6880c1cd2be1efacc37bdc972c7e05d09e999b
SHA256

709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5
SHA512

b067ee235366d171ce1fcd5f6e05c6fc8500dcf9e9ac4a630cd0515783a225c27032dc9e50dc2be6faae1c32afae63494a6ed20039b8995d422c14737b12c9f8
SSDEEP

48:ShlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t+RuqSxp:+WLkFfNnOKYloIQ2pm2pbYSSxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2212	2204	WerFault.exe	3

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2212	2204	709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe	28
PID 2204 wrote to memory of 2212	2204	709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe	28
PID 2204 wrote to memory of 2212	2204	709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe	28
PID 2204 wrote to memory of 2212	2204	709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe	28

C:\Users\Admin\AppData\Local\Temp\709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe
"C:\Users\Admin\AppData\Local\Temp\709c81eea9b87ace6cd2e7264664290723a82985eb010f8158c307b4c51697d5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 48
  2⤵
  - Program crash
  PID:2212