eeb8c2fc062a9b5a67acaea230476e5671dfdca8f5a402a4ba9a0f86f34448fe

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 21:23

Target

bcd6049c50f6bb88889062a11fa9cfbc.exe
Size

124KB
MD5

bcd6049c50f6bb88889062a11fa9cfbc
SHA1

3f9dcc3386125d12732acfdabf504aacfe5399c4
SHA256

eeb8c2fc062a9b5a67acaea230476e5671dfdca8f5a402a4ba9a0f86f34448fe
SHA512

9f5f19c199badffa3abb7dd33b9d98a58aea45daad0156e43d5794e62daceeb1ed22ce4f6ba4c94f931affc9a2d2c2cbf967d2fc996f585350b1739cf49804bb
SSDEEP

1536:9jrOhxI61k5AClQifZvpde1mwltCZ35SC3zPwCRFp8rhS8c+0ObWtOIhyVbRpmmT:1JnNZablpszP5XpUS8c+0BtO4kSUd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1916	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 1916	2360	bcd6049c50f6bb88889062a11fa9cfbc.exe	28
PID 2360 wrote to memory of 1916	2360	bcd6049c50f6bb88889062a11fa9cfbc.exe	28
PID 2360 wrote to memory of 1916	2360	bcd6049c50f6bb88889062a11fa9cfbc.exe	28
PID 2360 wrote to memory of 1916	2360	bcd6049c50f6bb88889062a11fa9cfbc.exe	28

C:\Users\Admin\AppData\Local\Temp\bcd6049c50f6bb88889062a11fa9cfbc.exe
"C:\Users\Admin\AppData\Local\Temp\bcd6049c50f6bb88889062a11fa9cfbc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 36
  2⤵
  - Program crash
  PID:1916

memory/2360-0-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download
memory/2360-1-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download