705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3

Analysis

max time kernel
45s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 11:22

Target

705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe
Size

104KB
MD5

b0750f9e4494b93aa3fd694d2710111c
SHA1

57e0eec237badb3772f9a9db0fa94a958ae97553
SHA256

705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3
SHA512

2ad5b8913ec3fc8b25c9582d78a6f655a0f1e3d02484b5cfe9a9a6f9cecc18c5a5f8c722613bd9136f8fedf69b538b9941da4b7324fcb0f57633c66e84bce087
SSDEEP

1536:7bt2h6H1aVxVo8Ivo7LtSKw1CAspjy5sSEYjZ2LxKfZnQD4Cp8rno+P3DgvxtN1:MDb2A7RZwgAscREQZ6gxnQDZ8joET0F

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

664 932 WerFault.exe 705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe

pid	pid_target	process	target process
664	932	WerFault.exe	705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe

description	pid	process	target process
PID 932 wrote to memory of 664	932	705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe	WerFault.exe
PID 932 wrote to memory of 664	932	705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe	WerFault.exe
PID 932 wrote to memory of 664	932	705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe	WerFault.exe
PID 932 wrote to memory of 664	932	705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe
"C:\Users\Admin\AppData\Local\Temp\705226aba4ad397a842bfbfa7fd6b93d43990bec1da1c4b7737bd549b5d17ee3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 932 -s 36
2⤵
- Program crash
PID:664