0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 18:09

Target

0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe
Size

5KB
MD5

73d5868428ab387fd53ff22abe46e340
SHA1

9b2dde98a50424e0025061ea8f360540b1f42887
SHA256

0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445
SHA512

c86ee7f1c89f6c55211961ad23a74b95fc4503c64d1e8b61c2f33627f304b0a258b3fca989066e3e8d7be6245bae7134c0a9efdcf7b21765afba0cc1a75a5660
SSDEEP

48:SglXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7thBRuqSxp:pWLkFfNnOKYloIQ2pm2pbYSFbxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1120	2156	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2156 wrote to memory of 1120	2156	0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe	28
PID 2156 wrote to memory of 1120	2156	0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe	28
PID 2156 wrote to memory of 1120	2156	0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe	28
PID 2156 wrote to memory of 1120	2156	0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe	28

C:\Users\Admin\AppData\Local\Temp\0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe
"C:\Users\Admin\AppData\Local\Temp\0308289eae764200d73429811680d9548f7e62bc073bc0146743271c151f9445.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 48
  2⤵
  - Program crash
  PID:1120