0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6

Analysis

max time kernel
148s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 01:18

Target

0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe
Size

58KB
MD5

01863e8586fba732a9482bd78771f9a0
SHA1

4e8a0d14efe4609f51ccd0c0ccca66535d110ce9
SHA256

0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6
SHA512

2275525ae708d126a86d230b7b1e182545e7e7038461d4faaad256ddfe7777ef9e294f1cfa3909b6a8a70bc3157d7b64cce2950081021fc1eb5dc30c23c8b07b
SSDEEP

1536:01UmxIyYclkOZB4NgbeG/H4m5u1FaeeP8i2aC6qtY8i2:Jy28C2bD/H4m5u1EbtoO

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3760 2348 WerFault.exe 0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe

pid	pid_target	process	target process
3760	2348	WerFault.exe	0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe

description	pid	process	target process
PID 2348 wrote to memory of 3760	2348	0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe	WerFault.exe
PID 2348 wrote to memory of 3760	2348	0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe	WerFault.exe
PID 2348 wrote to memory of 3760	2348	0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe
"C:\Users\Admin\AppData\Local\Temp\0783769bd1597851bc24066d950230af3f02ca82a615405c774dc5eb2e943cc6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 440
2⤵
- Program crash
PID:3760

memory/2348-132-0x0000000030000000-0x000000003002E000-memory.dmp

Filesize
184KB

Download
memory/3760-133-0x0000000000000000-mapping.dmp

Download