8408b6ff3f7b8004d2711bb68f40a288b6d26d8b30b15e7a4ab7f7ba9cbc47f2

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
01/03/2024, 23:05

Target

888-61-0x0000000000400000-0x000000000041D000-memory.exe
Size

116KB
MD5

deb4af2a337faaecbdbd3a85a3c2d870
SHA1

f7e54393b7373391c0535b299df9cffd098fca32
SHA256

8408b6ff3f7b8004d2711bb68f40a288b6d26d8b30b15e7a4ab7f7ba9cbc47f2
SHA512

4dd1e32cda3b5b161f3ee75af7440b6095b5e743c5ddb4b7cb20db9367aa036a1e47997fd5003bd45f52d23c56dcb163a849eb1ab53f361a50d22ddc8d59d3b9
SSDEEP

1536:Bpaiq0I2XvL/5kVvpyITHAOEH8pIZ+msXvsfJre8oJ1C7uj9m:BpaikE/5SppIZ+m2sfJrebJF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2252	2276	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 2252	2276	888-61-0x0000000000400000-0x000000000041D000-memory.exe	28
PID 2276 wrote to memory of 2252	2276	888-61-0x0000000000400000-0x000000000041D000-memory.exe	28
PID 2276 wrote to memory of 2252	2276	888-61-0x0000000000400000-0x000000000041D000-memory.exe	28
PID 2276 wrote to memory of 2252	2276	888-61-0x0000000000400000-0x000000000041D000-memory.exe	28

C:\Users\Admin\AppData\Local\Temp\888-61-0x0000000000400000-0x000000000041D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\888-61-0x0000000000400000-0x000000000041D000-memory.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2276 -s 36
  2⤵
  - Program crash
  PID:2252