6cc7c11fe0cb9bcd7668ab6dbf296ecb3bcaba08cf1606e7f3afb0cd63f24007

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 05:03

Target

8b773b0c91a947c49e56419ec6cf71ca.exe
Size

374KB
MD5

8b773b0c91a947c49e56419ec6cf71ca
SHA1

705d7a8c843a37109d824c5f3c9a2fc41bb82c24
SHA256

6cc7c11fe0cb9bcd7668ab6dbf296ecb3bcaba08cf1606e7f3afb0cd63f24007
SHA512

78291be05bbb67a1c00f6fe118a7c44a77c2f72273566e25c11c8dda9212aeb65ae5830a793063c95573c458b9f745fffbd7643a6845a1857015d8dab69f5b82
SSDEEP

6144:qoR1e1DDPNE7ZNMOXa0ADBbfEoBtGPrqfMR2fd5WNb6V42NE61+XpoAXE8Vynpqx:qoLeR0/u0kRf1/4kMR2156b6V4Z6AiTi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2208	2376	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 2208	2376	8b773b0c91a947c49e56419ec6cf71ca.exe	28
PID 2376 wrote to memory of 2208	2376	8b773b0c91a947c49e56419ec6cf71ca.exe	28
PID 2376 wrote to memory of 2208	2376	8b773b0c91a947c49e56419ec6cf71ca.exe	28
PID 2376 wrote to memory of 2208	2376	8b773b0c91a947c49e56419ec6cf71ca.exe	28

C:\Users\Admin\AppData\Local\Temp\8b773b0c91a947c49e56419ec6cf71ca.exe
"C:\Users\Admin\AppData\Local\Temp\8b773b0c91a947c49e56419ec6cf71ca.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2376 -s 88
  2⤵
  - Program crash
  PID:2208

memory/2376-1-0x0000000000400000-0x0000000000523100-memory.dmp

Filesize
1.1MB

Download
memory/2376-0-0x0000000000400000-0x0000000000523100-memory.dmp

Filesize
1.1MB

Download
memory/2376-2-0x0000000000400000-0x0000000000523100-memory.dmp

Filesize
1.1MB

Download
memory/2376-6-0x0000000000400000-0x0000000000523100-memory.dmp

Filesize
1.1MB

Download
memory/2376-7-0x0000000000400000-0x0000000000523100-memory.dmp

Filesize
1.1MB

Download