61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 11:26

Target

61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe
Size

190KB
MD5

d5a6de8db2ded35a0b97292404779c33
SHA1

de4596669f540b8bd34aa7cbf50e977f04f3bba3
SHA256

61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e
SHA512

182dd7b5c5baa7ef13932670530fd3443e6250fed25371e86cb714fdefe1328768b7b4887309e517302b774af0bfd9849e1476be77e3b7690a6fb2d1503eb4c0
SSDEEP

1536:BQVkwBMQBc2MqeUD41pC6+MsLk7FYKdO3GnVeaxyeEwRO:BQVLdVMYDApC6+MsLtwJxywE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	2280	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2280 wrote to memory of 2788	2280	61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe	28
PID 2280 wrote to memory of 2788	2280	61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe	28
PID 2280 wrote to memory of 2788	2280	61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe	28
PID 2280 wrote to memory of 2788	2280	61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe	28

C:\Users\Admin\AppData\Local\Temp\61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe
"C:\Users\Admin\AppData\Local\Temp\61eb9073ea890d0386a9a22fd80baf1374f4e9a87bc37984eb94ddbe5aae030e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2280
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2280 -s 516
  2⤵
  - Program crash
  PID:2788

memory/2280-0-0x0000000000840000-0x0000000000874000-memory.dmp

Filesize
208KB

Download
memory/2280-1-0x0000000074430000-0x0000000074B1E000-memory.dmp

Filesize
6.9MB

Download
memory/2280-2-0x0000000074430000-0x0000000074B1E000-memory.dmp

Filesize
6.9MB

Download