3d07b09f83f2fc5dcb7f2429cac9a37160181da77df5a429e37b98dd685f239f

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04-06-2024 21:07

Target

a74811b7e2d71612463144c69c0ca7e2.exe
Size

352KB
MD5

a74811b7e2d71612463144c69c0ca7e2
SHA1

900132a2213f70aed06e9982e47cfdcc8964b710
SHA256

3d07b09f83f2fc5dcb7f2429cac9a37160181da77df5a429e37b98dd685f239f
SHA512

c4c5bef04693f000ae1f45d2a2d28f67609f36a635464d5025a50b939eaf9cc8d7766355990847f5679375f3d4b760e035dd92914f754ae64df6923da1cecebe
SSDEEP

6144:IsCv/QNuZNjDPp9XC2Fgd6dwiJLR8ATGb5gBJYgEltzK5d5Sw+tuhdZUui/EO:I/+uZNjDPNGeR85+YgEf25CtuhLi/EO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2836	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2836	2436	a74811b7e2d71612463144c69c0ca7e2.exe	28
PID 2436 wrote to memory of 2836	2436	a74811b7e2d71612463144c69c0ca7e2.exe	28
PID 2436 wrote to memory of 2836	2436	a74811b7e2d71612463144c69c0ca7e2.exe	28
PID 2436 wrote to memory of 2836	2436	a74811b7e2d71612463144c69c0ca7e2.exe	28

C:\Users\Admin\AppData\Local\Temp\a74811b7e2d71612463144c69c0ca7e2.exe
"C:\Users\Admin\AppData\Local\Temp\a74811b7e2d71612463144c69c0ca7e2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 52
  2⤵
  - Program crash
  PID:2836

memory/2436-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2436-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download