c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 03:21

Target

c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe
Size

72KB
MD5

1b8d0cc47978f0977c92a1ab4a475cca
SHA1

992eb797595892973af6e5f752de8c922c5f429c
SHA256

c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca
SHA512

66d8c43a3dfd83af9048a5481c24062dcc56c742f9b12f71a2b5650e270c5fd91c80508c718454525ad1b745a180a405ef635f21f83aa2a61b54d747ee6daec9
SSDEEP

384:3/06wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yt/EWD+S83BXR+oGj:3MpQNwC3BEddsEqOt/hytp+x3BEJwnrE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1616	2108	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 1616	2108	c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe	29
PID 2108 wrote to memory of 1616	2108	c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe	29
PID 2108 wrote to memory of 1616	2108	c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe	29
PID 2108 wrote to memory of 1616	2108	c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe	29

C:\Users\Admin\AppData\Local\Temp\c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe
"C:\Users\Admin\AppData\Local\Temp\c1dac21798a6f0d4b036b69efe473729a1a4878d470e93def029f3a2c0fde5ca.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 36
  2⤵
  - Program crash
  PID:1616