89f030843e350ff865d28af04141dec2d61075ec3a243765c608859f13e89ad3

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 08:19

Target

c824ecbeccef704e7dd34c9a3e44acb1.exe
Size

22KB
MD5

c824ecbeccef704e7dd34c9a3e44acb1
SHA1

8ded13bc487a3ce57c2c200e7176ad91e31e1e77
SHA256

89f030843e350ff865d28af04141dec2d61075ec3a243765c608859f13e89ad3
SHA512

515f7e4f3f8c8a0bc08c06cc53fa5cb23b068490c94f45ac7ec667d4c2aed6573c86c5345d3c791a5346cf30a92c37ce1f8efa3f3a7aa8aacc078a65249a7e68
SSDEEP

384:5dKxA+o6PLlwFZpjSt4s3EdJdt69yIATKyweZa6ivjABFY2naLsef:oAKT6FZtSt47JT687TLZ3iUFQLss

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2264	2936	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 2264	2936	c824ecbeccef704e7dd34c9a3e44acb1.exe	28
PID 2936 wrote to memory of 2264	2936	c824ecbeccef704e7dd34c9a3e44acb1.exe	28
PID 2936 wrote to memory of 2264	2936	c824ecbeccef704e7dd34c9a3e44acb1.exe	28
PID 2936 wrote to memory of 2264	2936	c824ecbeccef704e7dd34c9a3e44acb1.exe	28

C:\Users\Admin\AppData\Local\Temp\c824ecbeccef704e7dd34c9a3e44acb1.exe
"C:\Users\Admin\AppData\Local\Temp\c824ecbeccef704e7dd34c9a3e44acb1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 116
  2⤵
  - Program crash
  PID:2264