47303073b0228226cf21f3f421b527b4ea3dde58e3fbade129f0b35313b1b453

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 16:10

Target

c3c8e13389517cd720515ea25a1de0f0.exe
Size

181KB
MD5

c3c8e13389517cd720515ea25a1de0f0
SHA1

7dd228e3211e15d58afcf88903f4609390045606
SHA256

47303073b0228226cf21f3f421b527b4ea3dde58e3fbade129f0b35313b1b453
SHA512

78949137e66926b3e9c3bf8ae1d7c693fec7667d69ab10c22a3e954ab3bfda33fdda42735235a6b0ad0ae058008ac0167729056a6e107ed05e60bb31125f33d8
SSDEEP

3072:S/98m0Vvh5yudk50iw0kopNzoAuqB3Jdmp/oXX+4dMigVJfhllF2WgFGSXrELd0y:JNsudk5dZjzH1ZoUSVrlD2jFGSXrAd9Z

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	1804	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 2260	1804	c3c8e13389517cd720515ea25a1de0f0.exe	28
PID 1804 wrote to memory of 2260	1804	c3c8e13389517cd720515ea25a1de0f0.exe	28
PID 1804 wrote to memory of 2260	1804	c3c8e13389517cd720515ea25a1de0f0.exe	28
PID 1804 wrote to memory of 2260	1804	c3c8e13389517cd720515ea25a1de0f0.exe	28

C:\Users\Admin\AppData\Local\Temp\c3c8e13389517cd720515ea25a1de0f0.exe
"C:\Users\Admin\AppData\Local\Temp\c3c8e13389517cd720515ea25a1de0f0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1804 -s 88
  2⤵
  - Program crash
  PID:2260

memory/1804-1-0x0000000000400000-0x00000000004FA000-memory.dmp

Filesize
1000KB

Download
memory/1804-3-0x0000000000400000-0x00000000004FA000-memory.dmp

Filesize
1000KB

Download
memory/1804-2-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1804-4-0x0000000000400000-0x00000000004FA000-memory.dmp

Filesize
1000KB

Download
memory/1804-5-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download