a4dd7691d3c288e866d9bf8c33d79469872d76b1c5eb3e29f76999c2e79a060d

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/02/2024, 07:10

Target

6d6621eae014f46d32ce46dff27de52a.exe
Size

257KB
MD5

6d6621eae014f46d32ce46dff27de52a
SHA1

73751d4be7a24d55bd49ea39af188960370e1274
SHA256

a4dd7691d3c288e866d9bf8c33d79469872d76b1c5eb3e29f76999c2e79a060d
SHA512

dd82cb5e8fb6984f6f29ad2043614fbc5882b17a70544efe6fc69de281818df40a790109bc2df47bd7cfc03c359e6a2969d1e664c1d195568c1c8c6006b485b7
SSDEEP

6144:zcTdKzK/R260FJM38oj49GP7gXbgXPr4lQz:zpzWhgO38oj4EgXbmrgQz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2904	2464	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2464 wrote to memory of 2904	2464	6d6621eae014f46d32ce46dff27de52a.exe	28
PID 2464 wrote to memory of 2904	2464	6d6621eae014f46d32ce46dff27de52a.exe	28
PID 2464 wrote to memory of 2904	2464	6d6621eae014f46d32ce46dff27de52a.exe	28
PID 2464 wrote to memory of 2904	2464	6d6621eae014f46d32ce46dff27de52a.exe	28

C:\Users\Admin\AppData\Local\Temp\6d6621eae014f46d32ce46dff27de52a.exe
"C:\Users\Admin\AppData\Local\Temp\6d6621eae014f46d32ce46dff27de52a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2464
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2464 -s 660
  2⤵
  - Program crash
  PID:2904

memory/2464-0-0x0000000000D90000-0x0000000000DD4000-memory.dmp

Filesize
272KB

Download
memory/2464-1-0x0000000074120000-0x000000007480E000-memory.dmp

Filesize
6.9MB

Download
memory/2464-2-0x0000000000390000-0x00000000003AA000-memory.dmp

Filesize
104KB

Download
memory/2464-3-0x0000000000D50000-0x0000000000D90000-memory.dmp

Filesize
256KB

Download
memory/2464-4-0x0000000074120000-0x000000007480E000-memory.dmp

Filesize
6.9MB

Download
memory/2464-5-0x0000000000D50000-0x0000000000D90000-memory.dmp

Filesize
256KB

Download