e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 11:20

Target

e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe
Size

56KB
MD5

c81f66acc4cf48bf82957eb35301a251
SHA1

68cf4e415f2de2da9884c305700b598241f3e672
SHA256

e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2
SHA512

4d33945907ff6a5ac9a79ed4e011669a2f9137d70704815a0f338d610587c77e67221ea6fa929637e6f8d52d04c7d49e03f06f87e4bde5a4ba462f38dec8c613
SSDEEP

768:S1tdtb29O552L6oO2R/pLb5mWRPnFPD4NA9FKjvyEXR+I/FxWscTiL3rj0VCA4KU:S1td9rQpLNmedyeKjvusxQmLPQCPKXE

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2016 2032 WerFault.exe e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe

pid	pid_target	process	target process
2016	2032	WerFault.exe	e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe

description	pid	process	target process
PID 2032 wrote to memory of 2016	2032	e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe	WerFault.exe
PID 2032 wrote to memory of 2016	2032	e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe	WerFault.exe
PID 2032 wrote to memory of 2016	2032	e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe	WerFault.exe
PID 2032 wrote to memory of 2016	2032	e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe
"C:\Users\Admin\AppData\Local\Temp\e37b6845d8d99c65223f1aa990fdb28a292870c567253923bfbed9801123fbc2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2032
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 36
  2⤵
  - Program crash
  PID:2016