2086c7d549d65cae406b4b2937671e0abf3917fd863e3ccdb0a5fe1712c87558

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 14:51

Target

bee20b00224fe84e8f53f0f1c9bc06bc.exe
Size

117KB
MD5

bee20b00224fe84e8f53f0f1c9bc06bc
SHA1

ed04fa106e27a7d9794687a1b8408b78a79677dc
SHA256

2086c7d549d65cae406b4b2937671e0abf3917fd863e3ccdb0a5fe1712c87558
SHA512

c2c45c29151777e6cc94845fe1a359d344f4b1569bcc3a810b94cb45236e9c291275a3d47402c3e81c51465c25a0e0f018de00c7c6e4db08e70f255bca75cc35
SSDEEP

3072:ODCVIWQvMNGY4NjYNBPG0we6QLwn927L6ZeXCYE9WrKrs:OWEG4Njsdwn9qL6ESjCKA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	2212	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2204	2212	bee20b00224fe84e8f53f0f1c9bc06bc.exe	28
PID 2212 wrote to memory of 2204	2212	bee20b00224fe84e8f53f0f1c9bc06bc.exe	28
PID 2212 wrote to memory of 2204	2212	bee20b00224fe84e8f53f0f1c9bc06bc.exe	28
PID 2212 wrote to memory of 2204	2212	bee20b00224fe84e8f53f0f1c9bc06bc.exe	28

C:\Users\Admin\AppData\Local\Temp\bee20b00224fe84e8f53f0f1c9bc06bc.exe
"C:\Users\Admin\AppData\Local\Temp\bee20b00224fe84e8f53f0f1c9bc06bc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2212 -s 36
  2⤵
  - Program crash
  PID:2204

memory/2212-0-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download
memory/2212-1-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download