ebe524d5b1354860db545d4395dc2cd500a15a0346f620c86635fdc75580790b

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 01:27

Target

aaa72ecd29a79ed27b27f345f0445cf5.exe
Size

92KB
MD5

aaa72ecd29a79ed27b27f345f0445cf5
SHA1

b30eac87b644e51bce9815e80d468034cb7fb91c
SHA256

ebe524d5b1354860db545d4395dc2cd500a15a0346f620c86635fdc75580790b
SHA512

5d0d1d5bdd9ed62dff30051890a9d15878d7897f660964f00d8fae91d79ecea91b2e7f023152c1ae1736cd629bace46efedd32002b338814d093c36aa4be7b62
SSDEEP

768:sjPGHXOleJ23/qm8tMTKM2qCDdXd14grnzCfYBVkw0a:R0eJ23/MtMO9dX34grzjVR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2372	2348	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 2372	2348	aaa72ecd29a79ed27b27f345f0445cf5.exe	28
PID 2348 wrote to memory of 2372	2348	aaa72ecd29a79ed27b27f345f0445cf5.exe	28
PID 2348 wrote to memory of 2372	2348	aaa72ecd29a79ed27b27f345f0445cf5.exe	28
PID 2348 wrote to memory of 2372	2348	aaa72ecd29a79ed27b27f345f0445cf5.exe	28

C:\Users\Admin\AppData\Local\Temp\aaa72ecd29a79ed27b27f345f0445cf5.exe
"C:\Users\Admin\AppData\Local\Temp\aaa72ecd29a79ed27b27f345f0445cf5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 36
  2⤵
  - Program crash
  PID:2372

memory/2348-0-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download