7dad654c9ba23ff1f6d3346cfbe712163f25b84b322b87affaad78b6b5165671

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 00:37

Target

78d0184ed9666389b41cc6adb2eafa41.exe
Size

65KB
MD5

78d0184ed9666389b41cc6adb2eafa41
SHA1

0663a7d9f626af8748e5ffff5a2cbd1c71c147c8
SHA256

7dad654c9ba23ff1f6d3346cfbe712163f25b84b322b87affaad78b6b5165671
SHA512

038f09302473540cd18f9e79d6d35402004596f2d4705a516ff25ab7ad51b2e48295000d108e295d46714a014a173fa199681b1d8ffbd5846fcb0a6aafd10745
SSDEEP

768:JQxkwifBsIKFZpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEigp/1k21m3uHRdMNDjF:J8kwiFTEhU4HDa1KkjWXta21mc/Mue9N

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	2204	WerFault.exe	7

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2316	2204	78d0184ed9666389b41cc6adb2eafa41.exe	28
PID 2204 wrote to memory of 2316	2204	78d0184ed9666389b41cc6adb2eafa41.exe	28
PID 2204 wrote to memory of 2316	2204	78d0184ed9666389b41cc6adb2eafa41.exe	28
PID 2204 wrote to memory of 2316	2204	78d0184ed9666389b41cc6adb2eafa41.exe	28

C:\Users\Admin\AppData\Local\Temp\78d0184ed9666389b41cc6adb2eafa41.exe
"C:\Users\Admin\AppData\Local\Temp\78d0184ed9666389b41cc6adb2eafa41.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 120
  2⤵
  - Program crash
  PID:2316

memory/2204-0-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2204-1-0x00000000002B0000-0x00000000002D1000-memory.dmp

Filesize
132KB

Download