02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05-06-2023 06:54

Target

02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe
Size

60KB
MD5

f30302ed8428c964902d42d2bc489092
SHA1

3486d30acae9689167e062c9568398b4de084feb
SHA256

02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11
SHA512

819832506436b36febc3f0df5866830f4492fa480fb877580604eb864623ba39d83151cba310b679e64e0252fce2d31e1582fe116e0ab4b712c2dcfcd412bcbc
SSDEEP

768:JKXpNQSz2Ty03MKYB5ceXddRbRiItD9iB9ll1byj6QFztZw:4DXz2Tl8X53dLRttGmOSti

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1996 2032 WerFault.exe 02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe

pid	pid_target	process	target process
1996	2032	WerFault.exe	02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe

description	pid	process	target process
PID 2032 wrote to memory of 1996	2032	02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe	WerFault.exe
PID 2032 wrote to memory of 1996	2032	02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe	WerFault.exe
PID 2032 wrote to memory of 1996	2032	02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe	WerFault.exe
PID 2032 wrote to memory of 1996	2032	02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe
"C:\Users\Admin\AppData\Local\Temp\02b5749599631d952bc56a767cd049a4ddcf9c333d4198cf7c2393ac164c6e11.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 92
2⤵
- Program crash
PID:1996