217ffde2a0bed0bbb25567b331c26bfb9243c78e4c22ac8265241f0889a84807

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07-03-2024 18:06

Target

b955fad4fc4ebb9156a6582501f65de4.exe
Size

359KB
MD5

b955fad4fc4ebb9156a6582501f65de4
SHA1

d3f61c6419a81d68c0b5f0d6e9cf62d44e5b74e9
SHA256

217ffde2a0bed0bbb25567b331c26bfb9243c78e4c22ac8265241f0889a84807
SHA512

05361bce2e1e62c71d3afe0da6e439cb0242ef75da7374de4391fe56f45c8f9e82dd86c8ea304fab9edaadd5b8e47a34e507ad03bf81c5c12248c522e89e8ade
SSDEEP

6144:X63JuP+XAteSIuDGtoVJ7LFbvsjy4C7Xrkf0aUflUXo8/Y91kFoYX2idfUU5:X63JNAteSIuDGtEFgm4x0aMSuZYTdft

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2104	2276	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 2104	2276	b955fad4fc4ebb9156a6582501f65de4.exe	28
PID 2276 wrote to memory of 2104	2276	b955fad4fc4ebb9156a6582501f65de4.exe	28
PID 2276 wrote to memory of 2104	2276	b955fad4fc4ebb9156a6582501f65de4.exe	28
PID 2276 wrote to memory of 2104	2276	b955fad4fc4ebb9156a6582501f65de4.exe	28

C:\Users\Admin\AppData\Local\Temp\b955fad4fc4ebb9156a6582501f65de4.exe
"C:\Users\Admin\AppData\Local\Temp\b955fad4fc4ebb9156a6582501f65de4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2276 -s 88
  2⤵
  - Program crash
  PID:2104