436f6f3d6349e97eb0c84dcbade2c87173887b7eced704353a77f57705bcdf1d

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 11:36

Target

7a22ef4b0d2cc3536e11a33a2885bdd8.exe
Size

321KB
MD5

7a22ef4b0d2cc3536e11a33a2885bdd8
SHA1

80486cf7051c3f1d735df9267cd1c2f800901fec
SHA256

436f6f3d6349e97eb0c84dcbade2c87173887b7eced704353a77f57705bcdf1d
SHA512

d0bd8886f666f21a81acdefadb55ff8e3e0e2d34d5e7d0cad58869b11179d9a4a717c4d28ce1b07363c1aba9352987b891cab8f59cab3b05405b29689c804039
SSDEEP

6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2384	2148	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 2384	2148	7a22ef4b0d2cc3536e11a33a2885bdd8.exe	15
PID 2148 wrote to memory of 2384	2148	7a22ef4b0d2cc3536e11a33a2885bdd8.exe	15
PID 2148 wrote to memory of 2384	2148	7a22ef4b0d2cc3536e11a33a2885bdd8.exe	15
PID 2148 wrote to memory of 2384	2148	7a22ef4b0d2cc3536e11a33a2885bdd8.exe	15

C:\Users\Admin\AppData\Local\Temp\7a22ef4b0d2cc3536e11a33a2885bdd8.exe
"C:\Users\Admin\AppData\Local\Temp\7a22ef4b0d2cc3536e11a33a2885bdd8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 116
  2⤵
  - Program crash
  PID:2384

memory/2148-0-0x0000000001230000-0x0000000001285000-memory.dmp

Filesize
340KB

Download