d103c7f4e2ccd7785751e6919235d8f71b1f6c6f732aedd6c53c61cee36accf2

Analysis

max time kernel
141s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02/02/2024, 23:38

Target

VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe
Size

6KB
MD5

015cc9dab62bbb797239adf1a9d0adb0
SHA1

d84cb33e62344c5ce3c5681895c22cac16293c09
SHA256

d103c7f4e2ccd7785751e6919235d8f71b1f6c6f732aedd6c53c61cee36accf2
SHA512

a2ba87c949bc1fd10dbe695c97bd3f80118eb0423fc6977ee7e683db2f5e3186084870c12e132003713ab1c6476a3aaea9012d0077d507652f7e1df399b5a267
SSDEEP

96:wm+dsQIRpUpo0uZ63SqNzTMWI+BJjzd+ZbOwsrYfauhvCxzSWM9J:V+dmppoCiTDI4fQZ4Yfa4CR5mJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2500	3040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 2500	3040	VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe	29
PID 3040 wrote to memory of 2500	3040	VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe	29
PID 3040 wrote to memory of 2500	3040	VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe	29
PID 3040 wrote to memory of 2500	3040	VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe	29

C:\Users\Admin\AppData\Local\Temp\VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe
"C:\Users\Admin\AppData\Local\Temp\VirusShare-015cc9dab62bbb797239adf1a9d0adb0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 76
  2⤵
  - Program crash
  PID:2500

memory/3040-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3040-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download