319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f

Analysis

max time kernel
33s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 04:12

Target

319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe
Size

28KB
MD5

4b46963b02b328e3ce7dcd85fe86b74a
SHA1

325406ee377ac219c650ce3883b1597892b226e7
SHA256

319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f
SHA512

eb3b2630425b0334db381451ff09f91320a4f2a8fd705e5b6ecb1ed73581eb47f061c1a7b4957b94e50b4504d8ee98961cecfe16fc53d0ea74b2022ac6c71ed0
SSDEEP

384:udciobH4JwqLmI8orPA0PvxeEoxec5xsA93gineBWt9vvA5cOt:YBobHWwq1lc0HPsV93gCeBY9vvAyOt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1644 1672 WerFault.exe 319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe

pid	pid_target	process	target process
1644	1672	WerFault.exe	319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe

description	pid	process	target process
PID 1672 wrote to memory of 1644	1672	319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe	WerFault.exe
PID 1672 wrote to memory of 1644	1672	319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe	WerFault.exe
PID 1672 wrote to memory of 1644	1672	319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe	WerFault.exe
PID 1672 wrote to memory of 1644	1672	319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe
"C:\Users\Admin\AppData\Local\Temp\319db83d3e4fb869ee19218449853a1de9ad02cb00396fb949e97d39abbac17f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1672 -s 92
2⤵
- Program crash
PID:1644