235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 19:39

Target

235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
Size

184KB
MD5

58d7130517fc7f2bafee35d084eba98d
SHA1

56deb8259cffcbfd71eb46c1533b7789bbba110f
SHA256

235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7
SHA512

eb04131013c664743f3362f3513fe63a5aa710524c1b04ba52507908fb308942b48b00abae1e9cf743efa182bc119f4f0df9f5db7421f92e1ffc15685d91b072
SSDEEP

1536:vBZi6jZ5YnK8o5x1pgSAvvwMjM9yvBc8omddhFD2kQftHhl5hCRxzp4dn3:5DInK8offgSQdjaW2AFDg1HhlAxFin3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2956	2728	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2728	235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 2956	2728	235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe	28
PID 2728 wrote to memory of 2956	2728	235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe	28
PID 2728 wrote to memory of 2956	2728	235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe	28
PID 2728 wrote to memory of 2956	2728	235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe	28

C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
"C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2728 -s 240
  2⤵
  - Program crash
  PID:2956