2c9266a258d5ed7321fed46212b91435790220edfd69602718f1cface76ea8ed

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 17:12

Target

f16a46e3b9d5fb93ca54fb2db0d45540N.exe
Size

3.0MB
MD5

f16a46e3b9d5fb93ca54fb2db0d45540
SHA1

861ae2e13f3c2722817f5231a57df00097f6c11d
SHA256

2c9266a258d5ed7321fed46212b91435790220edfd69602718f1cface76ea8ed
SHA512

f41d099e7f107a343bd85025136cb4f9be1db606920d998f64b7863f0f446d7c2451e1e54dbafd96e9df592ba349ae523c0cc345e8292cce0d20f1056f4afa09
SSDEEP

49152:KMLeP19bEQBeI0BawEjSghQO+8ejCXnTRhApjDRNqAe/l3YAUM:fLeP19gQI1BJEjP+8iC3thy4xYa

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2308	2244	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2308	2244	f16a46e3b9d5fb93ca54fb2db0d45540N.exe	30
PID 2244 wrote to memory of 2308	2244	f16a46e3b9d5fb93ca54fb2db0d45540N.exe	30
PID 2244 wrote to memory of 2308	2244	f16a46e3b9d5fb93ca54fb2db0d45540N.exe	30
PID 2244 wrote to memory of 2308	2244	f16a46e3b9d5fb93ca54fb2db0d45540N.exe	30

C:\Users\Admin\AppData\Local\Temp\f16a46e3b9d5fb93ca54fb2db0d45540N.exe
"C:\Users\Admin\AppData\Local\Temp\f16a46e3b9d5fb93ca54fb2db0d45540N.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 256
  2⤵
  - Program crash
  PID:2308

memory/2244-0-0x0000000000400000-0x0000000000710000-memory.dmp

Filesize
3.1MB

Download