514d92200a2afb636a89e1f387a8ccd65d046049ce680515f1367b8158c1e7ad

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-02-2024 19:42

Target

acb0e4a3b9de19d3009de739040c950c.exe
Size

55KB
MD5

acb0e4a3b9de19d3009de739040c950c
SHA1

4075622c47e5390cfd3a38b7e586edb720b2027e
SHA256

514d92200a2afb636a89e1f387a8ccd65d046049ce680515f1367b8158c1e7ad
SHA512

d587f503a25cbf9ee2a35963635c1793e77187dbc38ee74013f5f4ea7665b1d8b1b96456e7ae4fd0952000a24253b0aa8f7c7aac2b399394c016bd3bd134493f
SSDEEP

768:0NvAimjLUHwKd4K4Mjb4dISwaak0xeDXGQlafvKmz/sC0Lz+cN3N:0+1LUbdRJb42xeD2o0Jto+y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2240	2316	WerFault.exe	11

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 2240	2316	acb0e4a3b9de19d3009de739040c950c.exe	27
PID 2316 wrote to memory of 2240	2316	acb0e4a3b9de19d3009de739040c950c.exe	27
PID 2316 wrote to memory of 2240	2316	acb0e4a3b9de19d3009de739040c950c.exe	27
PID 2316 wrote to memory of 2240	2316	acb0e4a3b9de19d3009de739040c950c.exe	27

C:\Users\Admin\AppData\Local\Temp\acb0e4a3b9de19d3009de739040c950c.exe
"C:\Users\Admin\AppData\Local\Temp\acb0e4a3b9de19d3009de739040c950c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 120
  2⤵
  - Program crash
  PID:2240

memory/2316-0-0x0000000000320000-0x0000000000324000-memory.dmp

Filesize
16KB

Download