16b785329b97d0eb7b635282f8ef2d5fd7280cb3b0ada2e732f4fafec40db76c

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 17:21

Target

c92e13b5c5b0cc3635a174094406c23e.exe
Size

56KB
MD5

c92e13b5c5b0cc3635a174094406c23e
SHA1

06956c03d1590afafada680e6828c648f97e824f
SHA256

16b785329b97d0eb7b635282f8ef2d5fd7280cb3b0ada2e732f4fafec40db76c
SHA512

53ca365239f4e0a832787d399bab28b9fe0392db88d6c70e8ce7c4e29e2277d24f0cef865fe48cfce488f5faed799b11e1f4d29650c6cd3c95b613972e4643a2
SSDEEP

1536:UzF8RkmChaLPDGdDw6Wfz8HErIRytPX1x3H8Lt634RCwX+pBiYZ1YZwcyK46q7EG:YGXVqB/e6KiVI0ziYf4ePQ2IKC7OY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2824	2788	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2788 wrote to memory of 2824	2788	c92e13b5c5b0cc3635a174094406c23e.exe	28
PID 2788 wrote to memory of 2824	2788	c92e13b5c5b0cc3635a174094406c23e.exe	28
PID 2788 wrote to memory of 2824	2788	c92e13b5c5b0cc3635a174094406c23e.exe	28
PID 2788 wrote to memory of 2824	2788	c92e13b5c5b0cc3635a174094406c23e.exe	28

C:\Users\Admin\AppData\Local\Temp\c92e13b5c5b0cc3635a174094406c23e.exe
"C:\Users\Admin\AppData\Local\Temp\c92e13b5c5b0cc3635a174094406c23e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2788 -s 36
  2⤵
  - Program crash
  PID:2824