2ea646f075cbe5c4e51f091059719d1bb28bb6870b2708cd18a0183472c14fa6

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 01:04

Target

75fa4795270491abde00e5ec5d2fc741.exe
Size

22KB
MD5

75fa4795270491abde00e5ec5d2fc741
SHA1

09636d1d2c34942f4e9129765c042f899c0cadd5
SHA256

2ea646f075cbe5c4e51f091059719d1bb28bb6870b2708cd18a0183472c14fa6
SHA512

de6a5f742464c42b16842a4a6d4c2c555c52cb52792dbaffb23b43e32cc6400609d633eb60cdf38166c23488cd5de143d1d232a3203a5bae0425e089c9fbdbb5
SSDEEP

384:bJJ4ES3KlFc0SkZRKuz5HVLCtAYPtyv1JxcYVhUUgMtzb8N6qKRC:bJJi3Uc0hZR9NUn+1J13tzblqK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2300	2108	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2300	2108	75fa4795270491abde00e5ec5d2fc741.exe	22
PID 2108 wrote to memory of 2300	2108	75fa4795270491abde00e5ec5d2fc741.exe	22
PID 2108 wrote to memory of 2300	2108	75fa4795270491abde00e5ec5d2fc741.exe	22
PID 2108 wrote to memory of 2300	2108	75fa4795270491abde00e5ec5d2fc741.exe	22

C:\Users\Admin\AppData\Local\Temp\75fa4795270491abde00e5ec5d2fc741.exe
"C:\Users\Admin\AppData\Local\Temp\75fa4795270491abde00e5ec5d2fc741.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 64
  2⤵
  - Program crash
  PID:2300