9f8d80a55ca326c0cf42d354e1b3cb055c1be3646a4844a22bc31b59d113b7b4

Analysis

max time kernel
140s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 04:34

Target

7c2aa488663fcd179baff22b49b88f52.exe
Size

135KB
MD5

7c2aa488663fcd179baff22b49b88f52
SHA1

26845c2b34a3542867728d25ec8b27cdc5e65e95
SHA256

9f8d80a55ca326c0cf42d354e1b3cb055c1be3646a4844a22bc31b59d113b7b4
SHA512

e13f08b68fa65a0305af4e51e422a6942967356304ba06639c5490ca8aa4d5950e702679d91abd3e0e669007ff58eb495cddde16a5e7addb59c320737c393416
SSDEEP

3072:/q9f5c7G22OxGaXeGFdQTylC1em01857rLzIqaXdM/kENYAyVQLl:u5c7G22OxGaXeGFdQT1IA7rLzZ+E9y+B

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2112	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2112	2360	7c2aa488663fcd179baff22b49b88f52.exe	28
PID 2360 wrote to memory of 2112	2360	7c2aa488663fcd179baff22b49b88f52.exe	28
PID 2360 wrote to memory of 2112	2360	7c2aa488663fcd179baff22b49b88f52.exe	28
PID 2360 wrote to memory of 2112	2360	7c2aa488663fcd179baff22b49b88f52.exe	28

C:\Users\Admin\AppData\Local\Temp\7c2aa488663fcd179baff22b49b88f52.exe
"C:\Users\Admin\AppData\Local\Temp\7c2aa488663fcd179baff22b49b88f52.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 148
  2⤵
  - Program crash
  PID:2112

memory/2360-0-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/2360-1-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download