3a018646b50150e1b9da5c7cccb963b07e793c73b3f7cc38da289baa5dcb0750

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 03:13

Target

ca5636dfad8eeaaf8d9520ecec300fc1.exe
Size

428KB
MD5

ca5636dfad8eeaaf8d9520ecec300fc1
SHA1

3237b7d643dac79bf6a5a0bd363a18298e4532e6
SHA256

3a018646b50150e1b9da5c7cccb963b07e793c73b3f7cc38da289baa5dcb0750
SHA512

1731147ce5f5162267ee30e9dee90cc1e3d3254b59251375d32700b57395db1ef70cef8aaeff68dd8d8dfd039b9e3e4b9bca2eb62aec95b39f797673d8f9d77d
SSDEEP

6144:vfrOtTXgellDY1sCW+omOaWYKsMw+KfpokWg4ETFDpmiUpk3z5YHWCLnBC7MvI9x:nrOJXWsC4k4oPYpAMvIHxTM20rx6PP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2352	2108	WerFault.exe	27

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28
PID 2108 wrote to memory of 2352	2108	ca5636dfad8eeaaf8d9520ecec300fc1.exe	28

C:\Users\Admin\AppData\Local\Temp\ca5636dfad8eeaaf8d9520ecec300fc1.exe
"C:\Users\Admin\AppData\Local\Temp\ca5636dfad8eeaaf8d9520ecec300fc1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 280
  2⤵
  - Program crash
  PID:2352

memory/2108-0-0x0000000000400000-0x0000000000472000-memory.dmp

Filesize
456KB

Download
memory/2108-1-0x0000000000380000-0x00000000003F2000-memory.dmp

Filesize
456KB

Download
memory/2108-2-0x0000000000400000-0x0000000000472000-memory.dmp

Filesize
456KB

Download