d22c2796ed469e551d48c3d70283e51c5757d579fcead41db16f2ea099374ff0

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 08:02

Target

d59b2db8a752d0bc792b434f10fa0cae.exe
Size

99KB
MD5

d59b2db8a752d0bc792b434f10fa0cae
SHA1

c08db2f8602f5cf3818cf8da75672fadf8f37f37
SHA256

d22c2796ed469e551d48c3d70283e51c5757d579fcead41db16f2ea099374ff0
SHA512

d56f6ccd72859162d6e5121966a8f38414bf28bafea3eb89d57acb1b423d43e1c6b91b4a8a1de7c654a7455f49b2ff63c956139ef41252c7946985973505beed
SSDEEP

1536:Uk6QAOWOanp5m8EnV6Z9/BWbWvsePIlNqLpeKr296jW5AoUJZnkRP2j/SNF4L012:Uk606neVw9pW6ke6qU6jxkoLSNFsLI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2584	996	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 996 wrote to memory of 2584	996	d59b2db8a752d0bc792b434f10fa0cae.exe	28
PID 996 wrote to memory of 2584	996	d59b2db8a752d0bc792b434f10fa0cae.exe	28
PID 996 wrote to memory of 2584	996	d59b2db8a752d0bc792b434f10fa0cae.exe	28
PID 996 wrote to memory of 2584	996	d59b2db8a752d0bc792b434f10fa0cae.exe	28

C:\Users\Admin\AppData\Local\Temp\d59b2db8a752d0bc792b434f10fa0cae.exe
"C:\Users\Admin\AppData\Local\Temp\d59b2db8a752d0bc792b434f10fa0cae.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 996 -s 36
  2⤵
  - Program crash
  PID:2584

memory/996-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download