4668728326da121c9ebb6edc1e1bb40d12ffd80e0d48828d47e460407bf0aed1

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 09:24

Target

76fb8772aae4a46a2a798b9aa54f132f.exe
Size

9KB
MD5

76fb8772aae4a46a2a798b9aa54f132f
SHA1

42806e9daaf282e2a7ea9fa17857d1312d52a328
SHA256

4668728326da121c9ebb6edc1e1bb40d12ffd80e0d48828d47e460407bf0aed1
SHA512

8d66bb6ac8ce432ba9537bd7267ee717a0781d09ea9eec4e30e5d3dba05841c6e8cf493a856785ef407a6fec86b501dc8d052f1dceacf16ab2b15173bce99904
SSDEEP

192:Q/sCuVdyp9ta+SO7Lile+C54SjMdH7ksxlAxkuvjALXb/FGptu+/Z3W9:Gs5VUTB7QDSYNRAh8/wvZR3y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3044	3036	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 3044	3036	76fb8772aae4a46a2a798b9aa54f132f.exe	28
PID 3036 wrote to memory of 3044	3036	76fb8772aae4a46a2a798b9aa54f132f.exe	28
PID 3036 wrote to memory of 3044	3036	76fb8772aae4a46a2a798b9aa54f132f.exe	28
PID 3036 wrote to memory of 3044	3036	76fb8772aae4a46a2a798b9aa54f132f.exe	28

C:\Users\Admin\AppData\Local\Temp\76fb8772aae4a46a2a798b9aa54f132f.exe
"C:\Users\Admin\AppData\Local\Temp\76fb8772aae4a46a2a798b9aa54f132f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 88
  2⤵
  - Program crash
  PID:3044