19ffc101f7c4457a5adb66b38ce5823d52f596b323578de48d3585b1b57d24c6

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 14:32

Target

7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe
Size

315KB
MD5

352cc252a5f812e13691309de4712448
SHA1

a7778141853324e6e03f16136e645e7e88d4b15d
SHA256

7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1
SHA512

3749f746da36576029ec7f417f1f7e00e373d5059da48967975a56d8f50c6f9df27940f6e01a0f8ab289288895bb6e5cffbd4f1c4c87f051925a7e89a5e06b78
SSDEEP

6144:pe9pI60nbM8uPZy3+8KIDa2uke9NbjWHvhqB9GX3d/cZOXHS:49+60nbnul2QNee9GX3dEaHS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3036	2256	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 3036	2256	7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe	29
PID 2256 wrote to memory of 3036	2256	7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe	29
PID 2256 wrote to memory of 3036	2256	7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe	29
PID 2256 wrote to memory of 3036	2256	7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe	29

C:\Users\Admin\AppData\Local\Temp\7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe
"C:\Users\Admin\AppData\Local\Temp\7ec0dcfd6246ae153473783715a6fcdc5d5b76379404002057ad04b8746c7aa1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2256 -s 36
  2⤵
  - Program crash
  PID:3036

memory/2256-0-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download