4857f347be1a737b2d7326861fbed0ba8563814b28d6004e9548bec70ac52ed1

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 13:45

Target

SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe
Size

1.2MB
MD5

8239f4ffe0e9fae9430d6477b9836805
SHA1

91e835042c4d0d4477c19ccaa98cd8ee7d77be41
SHA256

4857f347be1a737b2d7326861fbed0ba8563814b28d6004e9548bec70ac52ed1
SHA512

69fdbc593ad7bca423eaa91b23cb9faef15e92c413d6e4dd83e422cb6a10787ff0d175752f06e9e0bca58f9b28ddd8875f939cfe072f5a1917a89015baf16fce
SSDEEP

12288:32kRUs+6uSxxVh2ikSbP6CLrAinD9PBWSyZXd+rotztbNpe+6FvD73Q8vP:3MsfuSxotVbNpeVL7dvP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2244	2512	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2512 wrote to memory of 2244	2512	SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe	28
PID 2512 wrote to memory of 2244	2512	SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe	28
PID 2512 wrote to memory of 2244	2512	SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe	28
PID 2512 wrote to memory of 2244	2512	SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe	28

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.9992.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 36
  2⤵
  - Program crash
  PID:2244