66c8588b8ca369d0131183f7869a9c759de6d3496436dca94476bda4c9ca05b4

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 10:44

Target

b7397e126fd86fd6acd11ad4106821b2.exe
Size

104KB
MD5

b7397e126fd86fd6acd11ad4106821b2
SHA1

ccc64e3443f72baa026a9f2723713ee2ad1bf8ea
SHA256

66c8588b8ca369d0131183f7869a9c759de6d3496436dca94476bda4c9ca05b4
SHA512

4dd56e87a6e1cd9fb210ecb3a01b3a3e14d28dddc301e0af81e401c3bbc5eb903e942cfb414b3a77fa65a2c29fec7ec3c2b7dc4eb089d378e981808356ce9754
SSDEEP

1536:7waidORWQ+/dKYcnrViRZce53Jq9LwySs5PN4QVMW94MFsE8ftwftyH5g:j+ePxYcnrViRKQU5V2MFktw1K

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2936	2208	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 2936	2208	b7397e126fd86fd6acd11ad4106821b2.exe	28
PID 2208 wrote to memory of 2936	2208	b7397e126fd86fd6acd11ad4106821b2.exe	28
PID 2208 wrote to memory of 2936	2208	b7397e126fd86fd6acd11ad4106821b2.exe	28
PID 2208 wrote to memory of 2936	2208	b7397e126fd86fd6acd11ad4106821b2.exe	28

C:\Users\Admin\AppData\Local\Temp\b7397e126fd86fd6acd11ad4106821b2.exe
"C:\Users\Admin\AppData\Local\Temp\b7397e126fd86fd6acd11ad4106821b2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2208 -s 140
  2⤵
  - Program crash
  PID:2936

memory/2208-1-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2208-2-0x00000000003C0000-0x00000000003D6000-memory.dmp

Filesize
88KB

Download
memory/2208-3-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download