c2a82dbbad5538e25a92233a18cbf2094d1338fa18b2a04f8a354f4745fffdc8

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 09:40

Target

a3753112636fe91373282ea80e92874f.exe
Size

5KB
MD5

a3753112636fe91373282ea80e92874f
SHA1

5bd185ec0283e0e07637dd743994954daeb323ad
SHA256

c2a82dbbad5538e25a92233a18cbf2094d1338fa18b2a04f8a354f4745fffdc8
SHA512

54eee819274062f481a65930cf663ec8eed8aec9df430e96f604dc1f0015538cd72d59e66a3ffe7a786d6dae54441cfc2b5f3f3debe712ebe697b310e4e6c3b7
SSDEEP

96:vXMUbw08fN6RWrxIhQDOhgodgbp/gbJGM8IbJj92hItSC9OyClm/msFXssyFRZrj:DwNfNjrehxST2JGMVvCS9am/3+sybISb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2216	1256	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1256 wrote to memory of 2216	1256	a3753112636fe91373282ea80e92874f.exe	28
PID 1256 wrote to memory of 2216	1256	a3753112636fe91373282ea80e92874f.exe	28
PID 1256 wrote to memory of 2216	1256	a3753112636fe91373282ea80e92874f.exe	28
PID 1256 wrote to memory of 2216	1256	a3753112636fe91373282ea80e92874f.exe	28

C:\Users\Admin\AppData\Local\Temp\a3753112636fe91373282ea80e92874f.exe
"C:\Users\Admin\AppData\Local\Temp\a3753112636fe91373282ea80e92874f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1256
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1256 -s 36
  2⤵
  - Program crash
  PID:2216