ce83e45c369e26dff4b4d85f65124f4127f627d035091e31cf8ff235f567ec65

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 00:18

Target

8dbc91489816b8b156a7d2399cbeedae.exe
Size

281KB
MD5

8dbc91489816b8b156a7d2399cbeedae
SHA1

9c113e3d43a0228bf4f65ad8be2b5d78a2c01f10
SHA256

ce83e45c369e26dff4b4d85f65124f4127f627d035091e31cf8ff235f567ec65
SHA512

d766b28300e2ca94ea0a66c6c05eb2f20653ee14818bf1d1ee1843922bf387d6b2b702369467525c357b7f3f07b93d4be9e3cecc54fcef159d45d8bec3263f87
SSDEEP

3072:2pdjaKDakp3QPz6tuJUSJNVd3Gkmw2fPRxfXudg2FXkClxwRm44SXkqL:2p5aKDakpW+oJpNVd3GKYOi21kUagSUK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1068	2216	WerFault.exe	15

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 1068	2216	8dbc91489816b8b156a7d2399cbeedae.exe	28
PID 2216 wrote to memory of 1068	2216	8dbc91489816b8b156a7d2399cbeedae.exe	28
PID 2216 wrote to memory of 1068	2216	8dbc91489816b8b156a7d2399cbeedae.exe	28
PID 2216 wrote to memory of 1068	2216	8dbc91489816b8b156a7d2399cbeedae.exe	28

C:\Users\Admin\AppData\Local\Temp\8dbc91489816b8b156a7d2399cbeedae.exe
"C:\Users\Admin\AppData\Local\Temp\8dbc91489816b8b156a7d2399cbeedae.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 168
  2⤵
  - Program crash
  PID:1068

memory/2216-0-0x00000000002E0000-0x0000000000329000-memory.dmp

Filesize
292KB

Download