Behavioral Report

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
11-03-2023 15:53

Target

a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe
Size

168KB
MD5

669bc00dabe56a00b74579f22c63175e
SHA1

8ec2593dcd41e2040a1ebcaf78d4a274b92987b1
SHA256

a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a
SHA512

3a6d832cfb8700352abbcc3d3d99997662b3a3d346f55a18f4b7e4def558e7a1fac7bf4d2a0e415193bc2246f39e0c8e97d4b9294b9745d91e09da1bc10ae061
SSDEEP

3072:Ir6BOtyO+T2oGCQF2KBjSwCnqD0DIoYDlssdKHny2hoe9tr0T:IrQ+yRT2oGCQF2KBOwCn9DIJDlssdW5l

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2000 1084 WerFault.exe a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe

pid	pid_target	process	target process
2000	1084	WerFault.exe	a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe

description	pid	process	target process
PID 1084 wrote to memory of 2000	1084	a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe	WerFault.exe
PID 1084 wrote to memory of 2000	1084	a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe	WerFault.exe
PID 1084 wrote to memory of 2000	1084	a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe	WerFault.exe
PID 1084 wrote to memory of 2000	1084	a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe
"C:\Users\Admin\AppData\Local\Temp\a16fce2955ac93ba1e3b7fff5755b943601260d5574d1165e8592f3a2caf109a.exe"
- Suspicious use of WriteProcessMemory
PID:1084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 36
- Program crash
PID:2000

00:00 00:00