cba7837ba47cd337d8b9d39726a8a5b857370cc43cffb290e22da93449e0d243

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 15:44

Target

8f89411758202d3ce5b7c346c3ea5c33.exe
Size

109KB
MD5

8f89411758202d3ce5b7c346c3ea5c33
SHA1

a59ed77ceb313742ddfa915a6f9383a32643ae47
SHA256

cba7837ba47cd337d8b9d39726a8a5b857370cc43cffb290e22da93449e0d243
SHA512

167098bea2452b0e0010ae90356d18a352ff43ddbedc8bff7e8146688427e4f10702790ed3bbdd4ecdfbb28744c484b7d6057a5131a4c074265d932a5b2fdf5c
SSDEEP

1536:WhicAJw67VJvk08jLZlZH2BOnHEJr/bBSF6eXhwLcv7rqiyc8IZT8wVIMV:xDVJc08j1XH2QHEJr/VS1XmLIrqG8av5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2348	2128	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2348	2128	8f89411758202d3ce5b7c346c3ea5c33.exe	28
PID 2128 wrote to memory of 2348	2128	8f89411758202d3ce5b7c346c3ea5c33.exe	28
PID 2128 wrote to memory of 2348	2128	8f89411758202d3ce5b7c346c3ea5c33.exe	28
PID 2128 wrote to memory of 2348	2128	8f89411758202d3ce5b7c346c3ea5c33.exe	28

C:\Users\Admin\AppData\Local\Temp\8f89411758202d3ce5b7c346c3ea5c33.exe
"C:\Users\Admin\AppData\Local\Temp\8f89411758202d3ce5b7c346c3ea5c33.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 36
  2⤵
  - Program crash
  PID:2348

memory/2128-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2128-1-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download