99c2d8637c439bc4e869655d69a5280faaf4c52fed6c2f4c14ea2f4d8edc9f7f

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 06:43

Target

7c69fa65cc4afd3162445df0a216dcbc.exe
Size

12KB
MD5

7c69fa65cc4afd3162445df0a216dcbc
SHA1

25e90a041262965af2a949d666922897dfa5ccf8
SHA256

99c2d8637c439bc4e869655d69a5280faaf4c52fed6c2f4c14ea2f4d8edc9f7f
SHA512

287181beefeffc7ad29904b528ea1c854ce4251c92a8967b9844718aa0ffd2b3028f03d9efb77abc371fdf8966b61dd2d2c58a026762c9895f1cf12b06515c7e
SSDEEP

96:cOx7ye+cnpnopANmoq3O7yZeBEIMj/VQyHg6y71yQtQKQYQ:cw7T+cnpw1oq3O+4Mj/VFy7MQjQYQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2732	2904	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2904 wrote to memory of 2732	2904	7c69fa65cc4afd3162445df0a216dcbc.exe	28
PID 2904 wrote to memory of 2732	2904	7c69fa65cc4afd3162445df0a216dcbc.exe	28
PID 2904 wrote to memory of 2732	2904	7c69fa65cc4afd3162445df0a216dcbc.exe	28
PID 2904 wrote to memory of 2732	2904	7c69fa65cc4afd3162445df0a216dcbc.exe	28

C:\Users\Admin\AppData\Local\Temp\7c69fa65cc4afd3162445df0a216dcbc.exe
"C:\Users\Admin\AppData\Local\Temp\7c69fa65cc4afd3162445df0a216dcbc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2904
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2904 -s 88
  2⤵
  - Program crash
  PID:2732