dd4d054a3049a5c1c2d2b0c6f6901e8526c63e886fb30c3a344e71c13f678ed4

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 16:54

Target

bc5233cc275b9600d596cdb678cfa7ae.exe
Size

77KB
MD5

bc5233cc275b9600d596cdb678cfa7ae
SHA1

ee8d665113ebfe4ec1faa65a6aee7b93c0266415
SHA256

dd4d054a3049a5c1c2d2b0c6f6901e8526c63e886fb30c3a344e71c13f678ed4
SHA512

f6ba7a67af6cd7576bce3aa49d26f12bdd6288b70bb56534400ac04fa84d272c9b2101fa71291ca9b23a3bd6011c1b0b0a822632d4b8bbf69b5d247e5bdd4f64
SSDEEP

768:7afyAq1xCLuVi1yUXZxQFOYC1cW5qoe8OK5darhmeEqk8iqVzC9GtYp:7a69VRyZxQd78OK5oTE4iqVzC9MYp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2116	1344	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1344 wrote to memory of 2116	1344	bc5233cc275b9600d596cdb678cfa7ae.exe	28
PID 1344 wrote to memory of 2116	1344	bc5233cc275b9600d596cdb678cfa7ae.exe	28
PID 1344 wrote to memory of 2116	1344	bc5233cc275b9600d596cdb678cfa7ae.exe	28
PID 1344 wrote to memory of 2116	1344	bc5233cc275b9600d596cdb678cfa7ae.exe	28

C:\Users\Admin\AppData\Local\Temp\bc5233cc275b9600d596cdb678cfa7ae.exe
"C:\Users\Admin\AppData\Local\Temp\bc5233cc275b9600d596cdb678cfa7ae.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1344 -s 36
  2⤵
  - Program crash
  PID:2116

memory/1344-0-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download