b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47

Analysis

max time kernel
156s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 21:10

Target

b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe
Size

56KB
MD5

d0efb7b7c36a29595053bbd1e73dcc85
SHA1

752f0fd695469dc82810d859ff1e6c43159ba26a
SHA256

b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47
SHA512

abd53c1fd5f269ec39fcc5f05687797a23d2732484efee6edfb804355d638164de94a10b366e781fc53105dcd93cb4ae0def25c3e1d47df3babdf15ce7ed941f
SSDEEP

1536:6HOJicktKZ+o8JKNbUhYGCWNRfstpwY+U:sWktKZgsN4RCg+zd

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
228	4104	WerFault.exe	82
2860	4104	WerFault.exe	82

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4104 wrote to memory of 228	4104	b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe	84
PID 4104 wrote to memory of 228	4104	b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe	84
PID 4104 wrote to memory of 228	4104	b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe	84

C:\Users\Admin\AppData\Local\Temp\b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe
"C:\Users\Admin\AppData\Local\Temp\b8b3cb4f15fd8b143da8f73c2bea6f7369ef2a5c86b420224d18e1bf13742d47.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 224
  2⤵
  - Program crash
  PID:228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 224
  2⤵
  - Program crash
  PID:2860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4104 -ip 4104
1⤵
PID:4528

memory/4104-132-0x00000000007C0000-0x00000000007E2000-memory.dmp

Filesize
136KB

Download
memory/4104-134-0x00000000007C0000-0x00000000007E2000-memory.dmp

Filesize
136KB

Download