f8cc76ce9c769057a9daeb93fda86318fb89810b0b3cce53f57ccfb583cabcd9

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/03/2024, 09:15

Target

b86098949aa328cfc44223ce2f5bea0e.exe
Size

430KB
MD5

b86098949aa328cfc44223ce2f5bea0e
SHA1

b6eb2ea5bc503827e85173b2131c43774003046d
SHA256

f8cc76ce9c769057a9daeb93fda86318fb89810b0b3cce53f57ccfb583cabcd9
SHA512

1ef08322f6a15e6f082dac15f81e99b68c8c895701741315778044c686b0be321e44dc8f393ff4995c6a38e6ce2edf879a8320d8434d648347596720ee9630c0
SSDEEP

6144:Ulsy4TNbEm1B1zzqaCh9Ju/2x+vw0b8ajNglS2+gUXpP9YC4r:UdwNIm1B1zzqrh9Jf+btwSfgUnBI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2136	1336	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1336 wrote to memory of 2136	1336	b86098949aa328cfc44223ce2f5bea0e.exe	28
PID 1336 wrote to memory of 2136	1336	b86098949aa328cfc44223ce2f5bea0e.exe	28
PID 1336 wrote to memory of 2136	1336	b86098949aa328cfc44223ce2f5bea0e.exe	28
PID 1336 wrote to memory of 2136	1336	b86098949aa328cfc44223ce2f5bea0e.exe	28

C:\Users\Admin\AppData\Local\Temp\b86098949aa328cfc44223ce2f5bea0e.exe
"C:\Users\Admin\AppData\Local\Temp\b86098949aa328cfc44223ce2f5bea0e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1336 -s 116
  2⤵
  - Program crash
  PID:2136

memory/1336-0-0x0000000000CC0000-0x0000000000D30000-memory.dmp

Filesize
448KB

Download