f4da57d0555605c326f7b9b5b5277a444216638d524aabb4ef28d71da82d7907

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
25-03-2024 11:39

Target

naredbe_br-_700611_-_C.E.F_doo.exe
Size

378KB
MD5

664c37187584a8e1166b7b165604c983
SHA1

9d220fa1faae9a4189a577cb83fad805aac6f2da
SHA256

f4da57d0555605c326f7b9b5b5277a444216638d524aabb4ef28d71da82d7907
SHA512

9daf4b2641cd252f87b254a8960300f603d9174c3dc21a9fc47d7e37be5590aa5681cd44778d07a63309c2c928725ee39c935ca1892c8af9a8d8c6caf9ae5515
SSDEEP

6144:ESTs6CT2GhNHYPkUlBDpgYmYHtu2gECB5R7gymxh8dk60iT4McP7ZPmT3D6J96sQ:ESTa2iNHYsUlppAYNEECB5mgTUMM7ZP+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2488	2088	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 2488	2088	naredbe_br-_700611_-_C.E.F_doo.exe	28
PID 2088 wrote to memory of 2488	2088	naredbe_br-_700611_-_C.E.F_doo.exe	28
PID 2088 wrote to memory of 2488	2088	naredbe_br-_700611_-_C.E.F_doo.exe	28
PID 2088 wrote to memory of 2488	2088	naredbe_br-_700611_-_C.E.F_doo.exe	28

C:\Users\Admin\AppData\Local\Temp\naredbe_br-_700611_-_C.E.F_doo.exe
"C:\Users\Admin\AppData\Local\Temp\naredbe_br-_700611_-_C.E.F_doo.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2088 -s 632
  2⤵
  - Program crash
  PID:2488

memory/2088-0-0x00000000002F0000-0x0000000000354000-memory.dmp

Filesize
400KB

Download
memory/2088-1-0x0000000074060000-0x000000007474E000-memory.dmp

Filesize
6.9MB

Download
memory/2088-2-0x00000000047B0000-0x00000000047F0000-memory.dmp

Filesize
256KB

Download
memory/2088-3-0x0000000074060000-0x000000007474E000-memory.dmp

Filesize
6.9MB

Download
memory/2088-4-0x00000000047B0000-0x00000000047F0000-memory.dmp

Filesize
256KB

Download
memory/2088-5-0x0000000074060000-0x000000007474E000-memory.dmp

Filesize
6.9MB

Download