d8d43df46ecbe3115a26a5faccd3e339821e2179c503b1f234d5d9fc079ededb

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02-02-2024 09:16

Target

89220fba77c5f452c1eb365e3cfb3ae8.exe
Size

84KB
MD5

89220fba77c5f452c1eb365e3cfb3ae8
SHA1

00a4629926b7b34219de7da9414054847f90efb2
SHA256

d8d43df46ecbe3115a26a5faccd3e339821e2179c503b1f234d5d9fc079ededb
SHA512

40b808a4490f74975427cfb09093abf7eda7b4eff85e815c883d6befb691c0ba751ec2b412f219b82ed9e4039b49ed193f98e806ed33ef81a45e2de29b6da01d
SSDEEP

768:B6R7iC6CqZJmK3gXqxDZyy4+agozM5Qz5L4aPhreJOrSs4cbFBIUyYlb5ighHY7+:MBEnvQXqj34+dozMMR4xrsvxLbBtY79

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2992	2304	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 2992	2304	89220fba77c5f452c1eb365e3cfb3ae8.exe	28
PID 2304 wrote to memory of 2992	2304	89220fba77c5f452c1eb365e3cfb3ae8.exe	28
PID 2304 wrote to memory of 2992	2304	89220fba77c5f452c1eb365e3cfb3ae8.exe	28
PID 2304 wrote to memory of 2992	2304	89220fba77c5f452c1eb365e3cfb3ae8.exe	28

C:\Users\Admin\AppData\Local\Temp\89220fba77c5f452c1eb365e3cfb3ae8.exe
"C:\Users\Admin\AppData\Local\Temp\89220fba77c5f452c1eb365e3cfb3ae8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 92
  2⤵
  - Program crash
  PID:2992