ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 19:43

Target

ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe
Size

12.3MB
MD5

62c48b255554c16beeec5c5bb4676442
SHA1

732b292f6cc2280532b7e885b93d1ad21c156559
SHA256

ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4
SHA512

8d854adf16bb7bae474c320a75127040444f53397c4477e5ec08ab5f8e4d290b24da9369daa0ea87ad927e8f34ccd63d6e36c34f85b34a71eba85bd75e96a796
SSDEEP

393216:L6Te0AnGBBQmTr5ianekTG7W4wmmABfBQmTrDa5ekTr7WU0EuK:30rBHZC75wodBaPf7RKK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1760	1544	WerFault.exe	25

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1544	ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 1760	1544	ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe	26
PID 1544 wrote to memory of 1760	1544	ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe	26
PID 1544 wrote to memory of 1760	1544	ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe	26
PID 1544 wrote to memory of 1760	1544	ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe	26

C:\Users\Admin\AppData\Local\Temp\ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe
"C:\Users\Admin\AppData\Local\Temp\ae1ce44532e1b4b24164283b8d520fcbe3aec273245d8bb744d9f08755714cd4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1544 -s 540
  2⤵
  - Program crash
  PID:1760

memory/1544-54-0x0000000000E90000-0x0000000000EAE000-memory.dmp

Filesize
120KB

Download