84267cc20dc49d3c2498d696c3b36f52af6cb8389e0e4574b9f0b11d03b3cee4

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 03:12

Target

c24f92d7dac342b573427b8c70514f77.exe
Size

1.3MB
MD5

c24f92d7dac342b573427b8c70514f77
SHA1

661915692de4a69aa065e82d0abd43e9cb6095fb
SHA256

84267cc20dc49d3c2498d696c3b36f52af6cb8389e0e4574b9f0b11d03b3cee4
SHA512

3e044c68a2a0af0a232de0e908d9cdaf0e7c322697055f406656d221b75b034fdad29eef7e460af6c6f5c2b8b94a0271e2fcba4afacf20cfc1e91cd683504a44
SSDEEP

24576:ntkCIabjKoh9WKqmTI0tkCIabjKoh9WKqmTgkCIabjKoh9Wj:uCIabjKoh9WKqCI7CIabjKoh9WKqCFCg

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2704	2020	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2704	2020	c24f92d7dac342b573427b8c70514f77.exe	29
PID 2020 wrote to memory of 2704	2020	c24f92d7dac342b573427b8c70514f77.exe	29
PID 2020 wrote to memory of 2704	2020	c24f92d7dac342b573427b8c70514f77.exe	29
PID 2020 wrote to memory of 2704	2020	c24f92d7dac342b573427b8c70514f77.exe	29

C:\Users\Admin\AppData\Local\Temp\c24f92d7dac342b573427b8c70514f77.exe
"C:\Users\Admin\AppData\Local\Temp\c24f92d7dac342b573427b8c70514f77.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2020 -s 560
  2⤵
  - Program crash
  PID:2704

memory/2020-1-0x0000000074110000-0x00000000747FE000-memory.dmp

Filesize
6.9MB

Download
memory/2020-0-0x0000000000960000-0x000000000096A000-memory.dmp

Filesize
40KB

Download
memory/2020-2-0x0000000074110000-0x00000000747FE000-memory.dmp

Filesize
6.9MB

Download