69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/02/2024, 01:17

Target

69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe
Size

183KB
MD5

cf0c3af5f3557a19f2b2c7f796ae046a
SHA1

9657803ff50b95acfbc0faa7cbd9cb2807770320
SHA256

69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51
SHA512

b5fe362a3df22f804cef05675ebce53465e71b0b6ffe42a1b9f67a95b6e435c62d85482426646ab802c750635dc6782b03984b9973c7bfb17b649b560222e49c
SSDEEP

3072:h/xDazXrP63vAiFvhjyKnZJX00qJi7777777777777eX6l8FY3Bip71kVhHLY+jy:B4zXrioixZnZ3t7777777777777eu8Fv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1796	2108	WerFault.exe	11

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 1796	2108	69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe	28
PID 2108 wrote to memory of 1796	2108	69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe	28
PID 2108 wrote to memory of 1796	2108	69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe	28
PID 2108 wrote to memory of 1796	2108	69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe	28

C:\Users\Admin\AppData\Local\Temp\69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe
"C:\Users\Admin\AppData\Local\Temp\69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 552
  2⤵
  - Program crash
  PID:1796

memory/2108-0-0x0000000000A00000-0x0000000000A34000-memory.dmp

Filesize
208KB

Download
memory/2108-1-0x0000000074B10000-0x00000000751FE000-memory.dmp

Filesize
6.9MB

Download
memory/2108-2-0x0000000074B10000-0x00000000751FE000-memory.dmp

Filesize
6.9MB

Download