79bfb1900c1b0fe5197dc8e10578310cf9ccc76a5065b04be87bf00101563ec6

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 04:52

Target

9acd019e5ec7cafb2b19f5a66edc528e.exe
Size

12KB
MD5

9acd019e5ec7cafb2b19f5a66edc528e
SHA1

1926888e07c14f1eae1e9409b3a5ad8bbfa8e675
SHA256

79bfb1900c1b0fe5197dc8e10578310cf9ccc76a5065b04be87bf00101563ec6
SHA512

90f2e46737fbdcdfd601a64dc9368c4871969adecc1755435a7fb06d681ebd5f49dba31c4d85cefb3c1b4be75057876753bd575ceec67b3e48273334f75b3632
SSDEEP

96:cn/D91FT6QahhAx3vvbbs2YL2fjxK8p71yQtQKQYQ:cnb91Z6QahhufTY2YL2f9Ko7MQjQYQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2008	2020	WerFault.exe	21

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2008	2020	9acd019e5ec7cafb2b19f5a66edc528e.exe	28
PID 2020 wrote to memory of 2008	2020	9acd019e5ec7cafb2b19f5a66edc528e.exe	28
PID 2020 wrote to memory of 2008	2020	9acd019e5ec7cafb2b19f5a66edc528e.exe	28
PID 2020 wrote to memory of 2008	2020	9acd019e5ec7cafb2b19f5a66edc528e.exe	28

C:\Users\Admin\AppData\Local\Temp\9acd019e5ec7cafb2b19f5a66edc528e.exe
"C:\Users\Admin\AppData\Local\Temp\9acd019e5ec7cafb2b19f5a66edc528e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2020 -s 88
  2⤵
  - Program crash
  PID:2008