60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 03:00

Target

60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe
Size

5KB
MD5

52d479b353fc60654bbafcc9a73a98b1
SHA1

36182e485af7d290743915abc526e62a0f978aa1
SHA256

60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f
SHA512

74940725eb3a14d2a3e0e56e9c217f6ce149fe146c1267294da68ef794dd09b1878c5cf54b6c165065fda9c0025370b7e8f15ac835153c834b4464f63960cfc5
SSDEEP

48:SMlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7taRuqSxp:lWLkFfNnOKYloIQ2pm2pbYS2xE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2324	2220	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2324	2220	60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe	28
PID 2220 wrote to memory of 2324	2220	60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe	28
PID 2220 wrote to memory of 2324	2220	60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe	28
PID 2220 wrote to memory of 2324	2220	60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe	28

C:\Users\Admin\AppData\Local\Temp\60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe
"C:\Users\Admin\AppData\Local\Temp\60de79777d3f2fb959b06ebd3239443806d0c53022f52d9a659700d6e1c6f86f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 48
  2⤵
  - Program crash
  PID:2324