ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0

Analysis

max time kernel
2s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 19:31

Target

ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe
Size

35KB
MD5

1bd1da2dd69a46252f6e5a21f79fb298
SHA1

8b3eef0ebc0b22ea4daa5fa543440a7ed93c8570
SHA256

ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0
SHA512

7ae10121d6c4c9ea58200d3b0da4bb1aebe1834f7841f3d15e7878093961ff52c71f00eaafc9701a3f190c63a344eb95a5874862bafc334a8abf79d7eb969781
SSDEEP

768:VWm1yk7GtfMznqCtedYgDJOvSwByBjtgUyCJq:YZ5fMB2YgwvSJJt3o

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2032	2036	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2032	2036	ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe	28
PID 2036 wrote to memory of 2032	2036	ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe	28
PID 2036 wrote to memory of 2032	2036	ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe	28
PID 2036 wrote to memory of 2032	2036	ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe	28

C:\Users\Admin\AppData\Local\Temp\ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe
"C:\Users\Admin\AppData\Local\Temp\ae971b17903871b54d7db7d470a51a177b6142dfc287e6cbb5864dd13d2fbac0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 88
  2⤵
  - Program crash
  PID:2032