34a3b0edd79cd52e96ef3156802bb44336a213cdb336dd05670f0630298fddfb

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03-02-2024 14:39

Target

8c95915d311790d32381c9b7892ed4e1.exe
Size

8KB
MD5

8c95915d311790d32381c9b7892ed4e1
SHA1

7fc27d4f93f92590728b4d17307c3ab73c612245
SHA256

34a3b0edd79cd52e96ef3156802bb44336a213cdb336dd05670f0630298fddfb
SHA512

1b1b2402fadbbc88cc9151ba7a702c3e1f3c6bcff65179ac18957586646e9986abd1b4ee9cd87807cc197e0fcab234c11e8e37a20b133ba6c3159996cb5b886b
SSDEEP

12:OEh/G70yUQVlW1cvjHPpsgWDvWbfqZvXyHzXItaX9/0S15Z0JM//oBc:OEhu702BvLx8vWuhXmpZGsABc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2224	640	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 2224	640	8c95915d311790d32381c9b7892ed4e1.exe	28
PID 640 wrote to memory of 2224	640	8c95915d311790d32381c9b7892ed4e1.exe	28
PID 640 wrote to memory of 2224	640	8c95915d311790d32381c9b7892ed4e1.exe	28
PID 640 wrote to memory of 2224	640	8c95915d311790d32381c9b7892ed4e1.exe	28

C:\Users\Admin\AppData\Local\Temp\8c95915d311790d32381c9b7892ed4e1.exe
"C:\Users\Admin\AppData\Local\Temp\8c95915d311790d32381c9b7892ed4e1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:640
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 640 -s 88
  2⤵
  - Program crash
  PID:2224

memory/640-0-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download