da2b4096fa55001592285656de7df9ea0126706d152048d2420fe5fd8fc13bbd

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 14:38

Target

ac205c848722f4e608f3cdce96e81231.exe
Size

73KB
MD5

ac205c848722f4e608f3cdce96e81231
SHA1

4117f1c3bf34b4b8eb6d011f31ba1ca66e43523c
SHA256

da2b4096fa55001592285656de7df9ea0126706d152048d2420fe5fd8fc13bbd
SHA512

e05e8c13e7c227ef934e662d40f8b9123ae24c3557548a8fc1fefd99ae5895204b7348d338da3a9feef525824d376fff3258e5abd234c078bc5125fd7a4492fd
SSDEEP

1536:kq8VLrjTmfNH30WBO6ibpcxA0gitTqXcQLPDjpcYFFJXNCZ/FHBq:kq8RnToX0WAx9QTqDLPqtZNHB

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2228	756	WerFault.exe	6

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 2228	756	ac205c848722f4e608f3cdce96e81231.exe	28
PID 756 wrote to memory of 2228	756	ac205c848722f4e608f3cdce96e81231.exe	28
PID 756 wrote to memory of 2228	756	ac205c848722f4e608f3cdce96e81231.exe	28
PID 756 wrote to memory of 2228	756	ac205c848722f4e608f3cdce96e81231.exe	28

C:\Users\Admin\AppData\Local\Temp\ac205c848722f4e608f3cdce96e81231.exe
"C:\Users\Admin\AppData\Local\Temp\ac205c848722f4e608f3cdce96e81231.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:756
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 756 -s 144
  2⤵
  - Program crash
  PID:2228

memory/756-0-0x0000000000400000-0x0000000000437400-memory.dmp

Filesize
221KB

Download
memory/756-1-0x0000000000400000-0x0000000000437400-memory.dmp

Filesize
221KB

Download