b2e3ef893eb456057652ab4434c1204484055bd056354e8672fc45f069c32800

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09-05-2024 15:28

Target

71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe
Size

306KB
MD5

6ee7eb36e567f6e466aaaf24c199df75
SHA1

b0c3b1eaf357df0d49b6db112d91f5b863f05253
SHA256

71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce
SHA512

dda4269111e1fee9ce47c059884171e43cb165916976763e4cfe484b9bd5dcc12269a4544fb01f1602a168ae920df31de1a06d03c3121560d5388644c0dae743
SSDEEP

6144:mUZl9vSWh60RVAtljy11j8A/QGetb58moOBJyL98R:bZKWhHJBYGetvhDyL98R

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3036	2216	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 3036	2216	71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe	28
PID 2216 wrote to memory of 3036	2216	71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe	28
PID 2216 wrote to memory of 3036	2216	71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe	28
PID 2216 wrote to memory of 3036	2216	71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe	28

C:\Users\Admin\AppData\Local\Temp\71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe
"C:\Users\Admin\AppData\Local\Temp\71829948467d2f16aa6d5c19d4887b4da3a316c3778ff88b4130bc047d02f5ce.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 88
  2⤵
  - Program crash
  PID:3036

memory/2216-0-0x0000000000908000-0x0000000000909000-memory.dmp

Filesize
4KB

Download