7773d96c1b355d97e74fb5b8f7a9873302f5f276f5b1459f01950fb282d2fc24

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 20:53

Target

bcc7b2f483551043ee3933b57c183afb.exe
Size

308KB
MD5

bcc7b2f483551043ee3933b57c183afb
SHA1

0788da590e0d59b4389bc5c7ad6b07dfa8518704
SHA256

7773d96c1b355d97e74fb5b8f7a9873302f5f276f5b1459f01950fb282d2fc24
SHA512

323b022a125ad3c2ff9e713388f03ca21fc4f6b30e32a0a8883acc7f36a90bf3765f06eed2d787a3c3cc2f0fef697910f35d0156aff10bd1f290a59f39f2529e
SSDEEP

3072:7h5PDykj37x2hypK7D6zdX3+P+kdMTzgo5NnyfiV9hgOlOfR68DaHI4Wa9xDTY9V:kofxgOltBeOxHYfH/VnyJFwUS47Tnbm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	836	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 836 wrote to memory of 2204	836	bcc7b2f483551043ee3933b57c183afb.exe	28
PID 836 wrote to memory of 2204	836	bcc7b2f483551043ee3933b57c183afb.exe	28
PID 836 wrote to memory of 2204	836	bcc7b2f483551043ee3933b57c183afb.exe	28
PID 836 wrote to memory of 2204	836	bcc7b2f483551043ee3933b57c183afb.exe	28

C:\Users\Admin\AppData\Local\Temp\bcc7b2f483551043ee3933b57c183afb.exe
"C:\Users\Admin\AppData\Local\Temp\bcc7b2f483551043ee3933b57c183afb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 836 -s 36
  2⤵
  - Program crash
  PID:2204