a25e67c5d60a06914132b723c64683a68103ee40c2b8bedc0d7a14cee328a089

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 21:26

Target

bcd7c0fcb5ce834187d30d2aa5b27b1d.exe
Size

107KB
MD5

bcd7c0fcb5ce834187d30d2aa5b27b1d
SHA1

e7daffcbecd3b714d86400bf4d89c1fc36eddd4e
SHA256

a25e67c5d60a06914132b723c64683a68103ee40c2b8bedc0d7a14cee328a089
SHA512

3f8d6a4bc8c1c68a073368c91a08e74b36d86dee09c6916d66d6cc8cab4556c4d65e75f4bcdbfb1d2803369512731da3aa0615f5c186178a9ebd722cdc8da33d
SSDEEP

3072:y4Z8TPnFZEaWR+ZQiPUdL6HwpAiDSPKESXAKi35HYywvmPxF9uluA:y4kFiQaiPlQKiDoPKw54F4al1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2476	2936	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 2476	2936	bcd7c0fcb5ce834187d30d2aa5b27b1d.exe	28
PID 2936 wrote to memory of 2476	2936	bcd7c0fcb5ce834187d30d2aa5b27b1d.exe	28
PID 2936 wrote to memory of 2476	2936	bcd7c0fcb5ce834187d30d2aa5b27b1d.exe	28
PID 2936 wrote to memory of 2476	2936	bcd7c0fcb5ce834187d30d2aa5b27b1d.exe	28

C:\Users\Admin\AppData\Local\Temp\bcd7c0fcb5ce834187d30d2aa5b27b1d.exe
"C:\Users\Admin\AppData\Local\Temp\bcd7c0fcb5ce834187d30d2aa5b27b1d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 116
  2⤵
  - Program crash
  PID:2476

memory/2936-0-0x0000000000400000-0x0000000000436000-memory.dmp

Filesize
216KB

Download
memory/2936-1-0x0000000000400000-0x0000000000436000-memory.dmp

Filesize
216KB

Download