3dc3ada0b56aa7093e433a1c83c5b67cf21a9bde0fe7ac951e5cf08f075f6200

Analysis

max time kernel
121s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 10:15

Target

be58800293270341e1759503ab7d355d.exe
Size

28KB
MD5

be58800293270341e1759503ab7d355d
SHA1

03eadc34a805f0e4930efc4199b8964c3ea7643f
SHA256

3dc3ada0b56aa7093e433a1c83c5b67cf21a9bde0fe7ac951e5cf08f075f6200
SHA512

433995206fa21a86b1d066bfa7a8e11fc1b5403a2de29e71de4cfb0d3fbce4a16ab03c23ee5a453b19e600126f8a13236445de53b8f19ba3e81682df77547fef
SSDEEP

192:1jDrvrZQ+xSyL6Y77sxM1wVQB1A4/tDapwU4RwSlJD9YuFuI:1PrzSPgHXskwVC1A4pa+3FuI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2360	2308	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2308 wrote to memory of 2360	2308	be58800293270341e1759503ab7d355d.exe	27
PID 2308 wrote to memory of 2360	2308	be58800293270341e1759503ab7d355d.exe	27
PID 2308 wrote to memory of 2360	2308	be58800293270341e1759503ab7d355d.exe	27
PID 2308 wrote to memory of 2360	2308	be58800293270341e1759503ab7d355d.exe	27

C:\Users\Admin\AppData\Local\Temp\be58800293270341e1759503ab7d355d.exe
"C:\Users\Admin\AppData\Local\Temp\be58800293270341e1759503ab7d355d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2308
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 88
  2⤵
  - Program crash
  PID:2360

memory/2308-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download