5d10d5d48efb2053e3a3344edb4fb2e3d4a4cd8b2a5a69a0722614a53bb16ddb

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 12:55

Target

7d2fae9038c0fa1f43917f7252e4375d.exe
Size

517KB
MD5

7d2fae9038c0fa1f43917f7252e4375d
SHA1

9c0e90a364b83fa6a24cae2e5a40ff26c356a057
SHA256

5d10d5d48efb2053e3a3344edb4fb2e3d4a4cd8b2a5a69a0722614a53bb16ddb
SHA512

bc6a989c5a6abb5ea29205f8b30311b64a3e2c219d55a545edcbd89ba000d3e6d35e0e38b28a413fb47303a5afcd0769c64a0c99813fe46a53aea87c5adb19a4
SSDEEP

12288:1NAG20haJz6quE9DowBicybYNSQ/ipq3YRpYdSgIYR5BtPMHc90hX:rJ2ZJ2quuBicybYzcq3Y+5BtPM8m

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1260	2000	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 1260	2000	7d2fae9038c0fa1f43917f7252e4375d.exe	28
PID 2000 wrote to memory of 1260	2000	7d2fae9038c0fa1f43917f7252e4375d.exe	28
PID 2000 wrote to memory of 1260	2000	7d2fae9038c0fa1f43917f7252e4375d.exe	28
PID 2000 wrote to memory of 1260	2000	7d2fae9038c0fa1f43917f7252e4375d.exe	28

C:\Users\Admin\AppData\Local\Temp\7d2fae9038c0fa1f43917f7252e4375d.exe
"C:\Users\Admin\AppData\Local\Temp\7d2fae9038c0fa1f43917f7252e4375d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2000 -s 36
  2⤵
  - Program crash
  PID:1260