3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/05/2024, 20:44

Target

3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe
Size

174KB
MD5

019f1c8dd18db2cd2301c10f44b3cd5d
SHA1

b849e773067bc302efd084f9f28ce8f3c75bbdc1
SHA256

3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4
SHA512

817d3375d7892962dc828987f90ffb00fe31900c77ee5dd037ec6657210f4078c17cdd36dce1bad181e4ddf3ddb0c88b91bf709843197e7f632f75ad4b0b5f2d
SSDEEP

3072:KZ/LhS0rKgHq+rFLIwgoovufDUbZMYIWJkrZ5Se:+/LhS0rKE/FLITo9mpIWWrP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2060	1924	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1924 wrote to memory of 2060	1924	3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe	28
PID 1924 wrote to memory of 2060	1924	3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe	28
PID 1924 wrote to memory of 2060	1924	3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe	28
PID 1924 wrote to memory of 2060	1924	3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe	28

C:\Users\Admin\AppData\Local\Temp\3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe
"C:\Users\Admin\AppData\Local\Temp\3e764a9512f91b2a618f0b054870d0d195eb006e92e8160600506c545b4250f4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1924
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1924 -s 172
  2⤵
  - Program crash
  PID:2060