c5dc9ceb0150ef176e44f96ca7d114cb22a01c4d1156efff793504bde630d900

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-02-2024 12:21

Target

9723d4a69e8aaedaaac80dad68ae7a2b.exe
Size

338KB
MD5

9723d4a69e8aaedaaac80dad68ae7a2b
SHA1

cb3b56233f106a148b71d98446a3b3f5cf30d7c9
SHA256

c5dc9ceb0150ef176e44f96ca7d114cb22a01c4d1156efff793504bde630d900
SHA512

38de7a5cf82b386c6846c63bd5b35f86305d47e0e52544c1e9d975a58de47a2918272168383f5a13e8261ad7899de4185c46888c85a1879e609c0eb9a5a2441e
SSDEEP

6144:3eCWa784Y4L18MU7Lu5tIrK7yix5Q6UJEVGmspJnaBJS8tnMN2:3NWaIo5DH0rK7y7JiGmsX6FMN2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2208	2040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 2208	2040	9723d4a69e8aaedaaac80dad68ae7a2b.exe	28
PID 2040 wrote to memory of 2208	2040	9723d4a69e8aaedaaac80dad68ae7a2b.exe	28
PID 2040 wrote to memory of 2208	2040	9723d4a69e8aaedaaac80dad68ae7a2b.exe	28
PID 2040 wrote to memory of 2208	2040	9723d4a69e8aaedaaac80dad68ae7a2b.exe	28

C:\Users\Admin\AppData\Local\Temp\9723d4a69e8aaedaaac80dad68ae7a2b.exe
"C:\Users\Admin\AppData\Local\Temp\9723d4a69e8aaedaaac80dad68ae7a2b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 36
  2⤵
  - Program crash
  PID:2208