8f7b7f86803c0ef7e26ea7c1571eaadd89ca8513f40b8cc2d2417f464ded04be

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/06/2024, 00:58

Target

VirusShare_668c9ae5b33f960844140cb77d3df077.exe
Size

266KB
MD5

668c9ae5b33f960844140cb77d3df077
SHA1

1a50857321d6ef2af7fe4561a341a5ecb2c26c54
SHA256

8f7b7f86803c0ef7e26ea7c1571eaadd89ca8513f40b8cc2d2417f464ded04be
SHA512

e9fd463825202f65f9f0a07561b315dc117e2b42f8b4f5e4817585e1737665802b24a74561130fc2846ef70d25f83b4aa2ef4463b1fb586ed0e9a33d351f399d
SSDEEP

6144:QYYypJogdml9c5yBizGpMxH3cmdgK8esj:Qt1gdG6yEzPxXzgssj

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2076	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2076	2236	VirusShare_668c9ae5b33f960844140cb77d3df077.exe	28
PID 2236 wrote to memory of 2076	2236	VirusShare_668c9ae5b33f960844140cb77d3df077.exe	28
PID 2236 wrote to memory of 2076	2236	VirusShare_668c9ae5b33f960844140cb77d3df077.exe	28
PID 2236 wrote to memory of 2076	2236	VirusShare_668c9ae5b33f960844140cb77d3df077.exe	28

C:\Users\Admin\AppData\Local\Temp\VirusShare_668c9ae5b33f960844140cb77d3df077.exe
"C:\Users\Admin\AppData\Local\Temp\VirusShare_668c9ae5b33f960844140cb77d3df077.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 128
  2⤵
  - Program crash
  PID:2076