37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/03/2024, 19:24

Target

37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe
Size

637KB
MD5

4ab3a708bb3087ff4626f7b7ee21c563
SHA1

261a6f27e0dc27eb3d289699c0117ccfe5178c11
SHA256

37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7
SHA512

0b2087316526d49fde5315ae840da7ffb6f4231b6c72588d4d400662c5055d9e805d901b64d188c5b1f721a00da509b6972942d680015f1e2722334d5debad89
SSDEEP

6144:wqDAwl0xPTMiR9JSSxPUKPdodHheV/Hwz4zmpPNips:w+67XR9JSSxvPdodHhIHufPNd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
340	2040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 340	2040	37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe	28
PID 2040 wrote to memory of 340	2040	37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe	28
PID 2040 wrote to memory of 340	2040	37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe	28
PID 2040 wrote to memory of 340	2040	37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe	28

C:\Users\Admin\AppData\Local\Temp\37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe
"C:\Users\Admin\AppData\Local\Temp\37f3459c57ac31d84e0cae17d61f53c60eda7763ad7f04afec0da2083c5fa2b7.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 36
  2⤵
  - Program crash
  PID:340