33124123bd092c96580a5ccbcb5babcf953c2e44eebd8190b5de93a44f0349f0

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 15:00

Target

cbb60ffbd1bae1cdfc37e4157a19731b.exe
Size

44KB
MD5

cbb60ffbd1bae1cdfc37e4157a19731b
SHA1

52161602b71afeadb8b0f0e81354bcdd6e2734f0
SHA256

33124123bd092c96580a5ccbcb5babcf953c2e44eebd8190b5de93a44f0349f0
SHA512

69ecd95fd8a19eba261dca2488d0f3075bae6e0ce08ccf094cb17cd28ce15e984b513e583ce5b9ad56e97a40aa7811098f9094f0f301f3c169c8e55e26e80312
SSDEEP

768:Vv8o4rVu1uB2MBjZ+3540QrwBgD0M/PsDL5PVSEFm+YnDTxwcdwi7:VvxG9B2uZIHQrwBgb/0DL9TF2J57

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1656	2276	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 1656	2276	cbb60ffbd1bae1cdfc37e4157a19731b.exe	28
PID 2276 wrote to memory of 1656	2276	cbb60ffbd1bae1cdfc37e4157a19731b.exe	28
PID 2276 wrote to memory of 1656	2276	cbb60ffbd1bae1cdfc37e4157a19731b.exe	28
PID 2276 wrote to memory of 1656	2276	cbb60ffbd1bae1cdfc37e4157a19731b.exe	28

C:\Users\Admin\AppData\Local\Temp\cbb60ffbd1bae1cdfc37e4157a19731b.exe
"C:\Users\Admin\AppData\Local\Temp\cbb60ffbd1bae1cdfc37e4157a19731b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2276 -s 136
  2⤵
  - Program crash
  PID:1656

memory/2276-0-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download