8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 02:17

Target

8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe
Size

1.3MB
MD5

4fb443db9afe3a347ee61ea22a67778f
SHA1

5a6a56b76e16e08e950e1b1b0c32ed0904d62de1
SHA256

8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6
SHA512

05a0b7887b2cef5cce14ef32f55e691ff305047ec8170fbab5c50dba6d15240f96e4cc5c0c00733b116490c93f0c289f6dd0c85b3c077c2939b2fb5742d62b9d
SSDEEP

12288:BYkgQsZFFTkmVAaHBWh5tge3IP7jsfmoDvZdxgcJ81QxIhsROo2nc2WCID6kcF:zH3lahW9gQ6HsbtPagLRt2nc29kcF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2816	2136	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2816	2136	8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe	28
PID 2136 wrote to memory of 2816	2136	8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe	28
PID 2136 wrote to memory of 2816	2136	8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe	28
PID 2136 wrote to memory of 2816	2136	8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe	28

C:\Users\Admin\AppData\Local\Temp\8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe
"C:\Users\Admin\AppData\Local\Temp\8478fbda7549dd950214cef4b47a845b1400fef78088be05ae339ca0495655c6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 36
  2⤵
  - Program crash
  PID:2816