5e14ced0c8579607f38e395bd54833ddd3ab075029166c937a60bf7595efc5be

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 22:30

Target

10f5afdaa3986b11eede3683fc280510N.exe
Size

66KB
MD5

10f5afdaa3986b11eede3683fc280510
SHA1

93a47bbd294de945c0e228a5bb127f6c8f958848
SHA256

5e14ced0c8579607f38e395bd54833ddd3ab075029166c937a60bf7595efc5be
SHA512

12dc09d86091bab4d367ae19769943dd71d91c4db92e537f577b8976f32a1a6839010696136fbc97380858841ea84b5b31128248d8ab1dfa806f9205257df0bd
SSDEEP

1536:GBXQgOKIuQnh8Lfz/1XbYeTrOTSR9eGnyU3bLwytW/YqlIYIRZui6udIZ:GBAPKTT1LduSTpQt/YVadudIZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1948	2240	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1948	2240	10f5afdaa3986b11eede3683fc280510N.exe	30
PID 2240 wrote to memory of 1948	2240	10f5afdaa3986b11eede3683fc280510N.exe	30
PID 2240 wrote to memory of 1948	2240	10f5afdaa3986b11eede3683fc280510N.exe	30
PID 2240 wrote to memory of 1948	2240	10f5afdaa3986b11eede3683fc280510N.exe	30

C:\Users\Admin\AppData\Local\Temp\10f5afdaa3986b11eede3683fc280510N.exe
"C:\Users\Admin\AppData\Local\Temp\10f5afdaa3986b11eede3683fc280510N.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 36
  2⤵
  - Program crash
  PID:1948

memory/2240-0-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download