6ac6237b7565488bb3047abe193dfa6d279387c217a90b74787d45053338dd0d

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/03/2024, 05:59

Target

e0eec42b9052eaa2f1d847cdaa4c6c56.exe
Size

17KB
MD5

e0eec42b9052eaa2f1d847cdaa4c6c56
SHA1

7908052d6b96d394bab6e6dbc427b04bca7ef72f
SHA256

6ac6237b7565488bb3047abe193dfa6d279387c217a90b74787d45053338dd0d
SHA512

f6b357102e278b41cb73b2e19ef99ca9ed1f9680b6def2b777ea8b01fd516bbd60920d42257e0ab31af23adfbc5837c2ab5c95c9242bfb00cee4b19787446d1d
SSDEEP

48:62fb629GkxbOKDk7UdxWmyQvLh+9NMmczkSpf3j4M41UEEmWjVU80:m2NOK47GxFyMLI9nWlT4M41UEEmWBx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2068	2196	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 2068	2196	e0eec42b9052eaa2f1d847cdaa4c6c56.exe	28
PID 2196 wrote to memory of 2068	2196	e0eec42b9052eaa2f1d847cdaa4c6c56.exe	28
PID 2196 wrote to memory of 2068	2196	e0eec42b9052eaa2f1d847cdaa4c6c56.exe	28
PID 2196 wrote to memory of 2068	2196	e0eec42b9052eaa2f1d847cdaa4c6c56.exe	28

C:\Users\Admin\AppData\Local\Temp\e0eec42b9052eaa2f1d847cdaa4c6c56.exe
"C:\Users\Admin\AppData\Local\Temp\e0eec42b9052eaa2f1d847cdaa4c6c56.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2196 -s 36
  2⤵
  - Program crash
  PID:2068