be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d

Analysis

max time kernel
46s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 11:21

Target

be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe
Size

86KB
MD5

4df81a8bb98a09b3eb57b37f1bddd47e
SHA1

d0a9682973a3b1fa48c589a548850524044daafd
SHA256

be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d
SHA512

0d8d440bd2bfc31e6bb95b1edcdae72c7c0003c886878353b6c75eb51825d9114eefd62b4bb42e450b55ab9cbf369771049f9b4edf2c40ce3d6cfdb3454421a1
SSDEEP

1536:BhK9UTCH05A0qPrI5p7b+1YVJ9Dy6snhULG31BOyYVmmqatSTNf1BnJNP7dcf7T4:BAaWH05A0qPrWVlc6snGqlctmmJcNf1x

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

628 960 WerFault.exe be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe

pid	pid_target	process	target process
628	960	WerFault.exe	be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe

description	pid	process	target process
PID 960 wrote to memory of 628	960	be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe	WerFault.exe
PID 960 wrote to memory of 628	960	be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe	WerFault.exe
PID 960 wrote to memory of 628	960	be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe	WerFault.exe
PID 960 wrote to memory of 628	960	be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe
"C:\Users\Admin\AppData\Local\Temp\be5772fbf3f78d4ab435bb43c2ba377881592449bc308e14a42e71e7087dab3d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 960 -s 36
2⤵
- Program crash
PID:628

memory/628-54-0x0000000000000000-mapping.dmp

Download
memory/960-55-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download