6b0c94c7e3c6c3b5dcddac8f793708d07a694dc75fcb74b663b3f7490268df3a

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 12:50

Target

8f315192559269095a271490e5da6bdc.exe
Size

202KB
MD5

8f315192559269095a271490e5da6bdc
SHA1

4bf60343390a1de664012080862f64526f2edd28
SHA256

6b0c94c7e3c6c3b5dcddac8f793708d07a694dc75fcb74b663b3f7490268df3a
SHA512

cb08dab9f2cb9c36cbecef1a431c62d05c517d96ce2896f1a3d72ded14fde09906b97ce02826965bb25ec4f765723ba03c74ac015cc9f629a3c09dd0dddeac08
SSDEEP

3072:eEA79FlT5IZaJumGVzMrWA5Fd15IDwQ2KDZ7qoQXHlsnGvQYygt0bftF4u:5ApDimumGVgr5SDvgnXFsQzmbfEu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2256	2040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 2256	2040	8f315192559269095a271490e5da6bdc.exe	28
PID 2040 wrote to memory of 2256	2040	8f315192559269095a271490e5da6bdc.exe	28
PID 2040 wrote to memory of 2256	2040	8f315192559269095a271490e5da6bdc.exe	28
PID 2040 wrote to memory of 2256	2040	8f315192559269095a271490e5da6bdc.exe	28

C:\Users\Admin\AppData\Local\Temp\8f315192559269095a271490e5da6bdc.exe
"C:\Users\Admin\AppData\Local\Temp\8f315192559269095a271490e5da6bdc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 380
  2⤵
  - Program crash
  PID:2256