34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
06/11/2022, 06:17

Target

34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe
Size

86KB
MD5

05ce8f24dc6d5ef4f0db8cfd3d820616
SHA1

48d744e431dd5bb70d29fd94b85e0bd984c069f9
SHA256

34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017
SHA512

857201e52d00bccd3f6f087bf7e491a9a77885590782d5de79f1a9c691a7960bfa00b39ebfe69f0f876c686b6527ff3f8b794a381c9c66ba851e53051990fa1d
SSDEEP

1536:UkCxMJNd4+XxAFOdUbUD8b0zSXvw64c2fTYU0t0l5snR:gM3+OdUurSXo64Nx0t+S

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1744	1104	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 1744	1104	34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe	27
PID 1104 wrote to memory of 1744	1104	34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe	27
PID 1104 wrote to memory of 1744	1104	34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe	27
PID 1104 wrote to memory of 1744	1104	34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe	27

C:\Users\Admin\AppData\Local\Temp\34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe
"C:\Users\Admin\AppData\Local\Temp\34459448fe7b164b22b3d86d8ee52a35dd3ebfcc24d0176017d9fe3700b5b017.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 36
  2⤵
  - Program crash
  PID:1744

memory/1104-55-0x0000000000400000-0x000000000042790A-memory.dmp

Filesize
158KB

Download