08a0877f1bbf562c7b072a92bb6b1c7847303633449ad5d73a2aa10e7edbac53

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 21:38

Target

a2cdf134acc4156eca0772107775f608.exe
Size

13KB
MD5

a2cdf134acc4156eca0772107775f608
SHA1

4e73c37129fd08a8141c1e99248187420cc46205
SHA256

08a0877f1bbf562c7b072a92bb6b1c7847303633449ad5d73a2aa10e7edbac53
SHA512

e49b00418806e15996eee4eb3215b0830a0bc555df3bf946819f4af95772991fbdbe65fa77857b1371c424de10439c94d71ee59f7455a777f313f8f26baca9c7
SSDEEP

192:5fOGbN1ukEu1W3l0vdV+p0MAxFdD+0voKMC51Rplw8LqKy5RrrthYFFGr5mu4:9lbPEj2vDa0M0FdqioagWqKURrYwmu4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2240	2268	WerFault.exe	24

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2240	2268	a2cdf134acc4156eca0772107775f608.exe	28
PID 2268 wrote to memory of 2240	2268	a2cdf134acc4156eca0772107775f608.exe	28
PID 2268 wrote to memory of 2240	2268	a2cdf134acc4156eca0772107775f608.exe	28
PID 2268 wrote to memory of 2240	2268	a2cdf134acc4156eca0772107775f608.exe	28

C:\Users\Admin\AppData\Local\Temp\a2cdf134acc4156eca0772107775f608.exe
"C:\Users\Admin\AppData\Local\Temp\a2cdf134acc4156eca0772107775f608.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 120
  2⤵
  - Program crash
  PID:2240

memory/2268-0-0x0000000013140000-0x000000001314F000-memory.dmp

Filesize
60KB

Download
memory/2268-1-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/2268-2-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download