e6d6b11b31dadf936915ac6e0eacb67a87b34bba11074d64501d3d0b993572ce

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-01-2024 05:32

Target

7f037d97419fd80778ca8b74debe9948.exe
Size

56KB
MD5

7f037d97419fd80778ca8b74debe9948
SHA1

61bc51afe02ac7297736f18284a43b142b33cb7b
SHA256

e6d6b11b31dadf936915ac6e0eacb67a87b34bba11074d64501d3d0b993572ce
SHA512

1285651a0660b494ea80a447cdf4ef675f9cc5797b3171647fd2a1a5704e2ca608ed147446f62e99a6208cd847d253aaa422b1fa4bc447ca6232ce54756b50bf
SSDEEP

768:dA6B6xyqopMPAO6ChO2UHPQbzdFOmw94fr+i18Z8jDwV:dA6BEyqk8+CZOmw94fKwEAm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2232	1648	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 2232	1648	7f037d97419fd80778ca8b74debe9948.exe	28
PID 1648 wrote to memory of 2232	1648	7f037d97419fd80778ca8b74debe9948.exe	28
PID 1648 wrote to memory of 2232	1648	7f037d97419fd80778ca8b74debe9948.exe	28
PID 1648 wrote to memory of 2232	1648	7f037d97419fd80778ca8b74debe9948.exe	28

C:\Users\Admin\AppData\Local\Temp\7f037d97419fd80778ca8b74debe9948.exe
"C:\Users\Admin\AppData\Local\Temp\7f037d97419fd80778ca8b74debe9948.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1648 -s 144
  2⤵
  - Program crash
  PID:2232

memory/1648-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1648-1-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download