0f8447c4bc5a895ac53d160e03ca36eb061ed5f76529e1268e28d0924564c8f4

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 04:54

Target

b68f3e678ac31e6823ac7fe05f174818.exe
Size

25KB
MD5

b68f3e678ac31e6823ac7fe05f174818
SHA1

4d19d3726a6d26938eae5148309617ba610dc9b3
SHA256

0f8447c4bc5a895ac53d160e03ca36eb061ed5f76529e1268e28d0924564c8f4
SHA512

ea2a4fff786d1a2e0a64d2e08f89994b6decc070c0e1877099f844ed06d77d0b1f5b369ff3fbf152520fc87ee18d141ee34f51c6ec4cd4af8b9302ff8cf2356d
SSDEEP

384:cbZfFOk78tfGh1RicyNbK42x5CTxEnZZyQeF0BwZUeMw9pvvmPDEpBklNB0:cbZUk7wfGnybKL0akpFtdMw9p2bTo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2160	2112	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 2160	2112	b68f3e678ac31e6823ac7fe05f174818.exe	28
PID 2112 wrote to memory of 2160	2112	b68f3e678ac31e6823ac7fe05f174818.exe	28
PID 2112 wrote to memory of 2160	2112	b68f3e678ac31e6823ac7fe05f174818.exe	28
PID 2112 wrote to memory of 2160	2112	b68f3e678ac31e6823ac7fe05f174818.exe	28

C:\Users\Admin\AppData\Local\Temp\b68f3e678ac31e6823ac7fe05f174818.exe
"C:\Users\Admin\AppData\Local\Temp\b68f3e678ac31e6823ac7fe05f174818.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 36
  2⤵
  - Program crash
  PID:2160

memory/2112-0-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download