ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 01:46

Target

ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe
Size

3.3MB
MD5

6aab437838e0a0163356f5890be20dcf
SHA1

a2c6f2f7df4950d6f6e0e900d53a5644a529cb9c
SHA256

ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34
SHA512

97c142866734c73ffb145e4f8412caff60582463219a824998e45abb29851ea18963ba73e4ec6f62bf9375b80e54c6d341e348ff7eca393db4df26080441aeb7
SSDEEP

98304:eURXt3VLzy8Lx3oiYdjhugA/3aR0ahPdvwOy3:eI7Lz/aiYdjUr3aRjJdvwOy3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2024	2248	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2024	2248	ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe	28
PID 2248 wrote to memory of 2024	2248	ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe	28
PID 2248 wrote to memory of 2024	2248	ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe	28
PID 2248 wrote to memory of 2024	2248	ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe	28

C:\Users\Admin\AppData\Local\Temp\ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe
"C:\Users\Admin\AppData\Local\Temp\ec194ebb23c1eeb3abb7371d57d0b78b260498bfe61bdead072c2d57a7a7ca34.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 208
  2⤵
  - Program crash
  PID:2024