56aad77e9e516ef87d90cd2127387b26b0ca5b446b132cd0590ecc48eb9b0084

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/02/2024, 21:38

Target

87b90c6bdd76b9a6125447cb644f98e1.exe
Size

76KB
MD5

87b90c6bdd76b9a6125447cb644f98e1
SHA1

f01aa2fa2215a59e0028b5c9df6db6a1a9a903d6
SHA256

56aad77e9e516ef87d90cd2127387b26b0ca5b446b132cd0590ecc48eb9b0084
SHA512

d8d93fa32f1017a2ae1766179f79146989916773bd9268a565852273e4045ce191948a679592a3e3630edd4f82029b9186d321b8945d77535e902098a425ee88
SSDEEP

1536:lKv8nEnTGH9ZAbViLvLI3eYaXEfkEYYLopjVrs2ryrd1vUQuq6:lKv2EnEjmyUOYlfkEHLoHs2qo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2116	2176	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 2116	2176	87b90c6bdd76b9a6125447cb644f98e1.exe	28
PID 2176 wrote to memory of 2116	2176	87b90c6bdd76b9a6125447cb644f98e1.exe	28
PID 2176 wrote to memory of 2116	2176	87b90c6bdd76b9a6125447cb644f98e1.exe	28
PID 2176 wrote to memory of 2116	2176	87b90c6bdd76b9a6125447cb644f98e1.exe	28

C:\Users\Admin\AppData\Local\Temp\87b90c6bdd76b9a6125447cb644f98e1.exe
"C:\Users\Admin\AppData\Local\Temp\87b90c6bdd76b9a6125447cb644f98e1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2176 -s 36
  2⤵
  - Program crash
  PID:2116

memory/2176-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download