2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26-06-2024 01:08

Target

2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe
Size

425KB
MD5

c64af626c4ed0784e010f5f2210e97f4
SHA1

03ff97d0f1530600ef134d64ddeabbe5770432a6
SHA256

2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417
SHA512

b8905e33b1a01fc94ed440c7c435e58b2fb43639aa377118e1ab894de2bf20d52803fd80e73c863c4bb8b8fda6cf246e7d942cc8f985e3d81a9c7702af268f0a
SSDEEP

12288:tAZeNp7Ik3kXzCNAt8T7yejH2KlN2fq3S9:tAop5KCNEoWS3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2968	2140	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2140 wrote to memory of 2968	2140	2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe	30
PID 2140 wrote to memory of 2968	2140	2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe	30
PID 2140 wrote to memory of 2968	2140	2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe	30
PID 2140 wrote to memory of 2968	2140	2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe	30

C:\Users\Admin\AppData\Local\Temp\2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe
"C:\Users\Admin\AppData\Local\Temp\2da1abbc4cc0cb6c5819206da60dbb09d72b02034ef375cd40ce289bdf2dc417.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 108
  2⤵
  - Program crash
  PID:2968

memory/2140-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download