8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17/02/2024, 21:32

Target

8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe
Size

5KB
MD5

0e5eae8b86507ff4919eb9f9c5ce03c7
SHA1

41b12bbdd3296df97a5f1751653a75792762c4ed
SHA256

8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe
SHA512

72d5a1933b0fd45afb58aed6f9094b49f3ed032243fb807d18c19ab806bebd9bb3013a8ba51fb6bf68416e84696e6b9e61bf54f56951907047425cfdf4e14158
SSDEEP

48:S+ilXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tsRuqSxp:YWLkFfNnOKYloIQ2pm2pbYSIxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
2180	2268	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2180	2268	8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe	1
PID 2268 wrote to memory of 2180	2268	8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe	1
PID 2268 wrote to memory of 2180	2268	8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe	1
PID 2268 wrote to memory of 2180	2268	8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe	1

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 48
1⤵
- Program crash
PID:2180

C:\Users\Admin\AppData\Local\Temp\8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe
"C:\Users\Admin\AppData\Local\Temp\8815d43880d54f5fb55a585d789761e77087ce6bfb20230b452c651b6ea9c2fe.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2268