a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d

Analysis

max time kernel
29s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05-06-2023 07:00

Target

a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe
Size

108KB
MD5

9d33fc4e1c288e1613ad07fb217d6f3e
SHA1

b514bcd6beb01f450224b42a89f992a25e5900c2
SHA256

a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d
SHA512

a8d0c99768b149ad9cde927d8849d8a28730a1f6ccbdd568962b335ef134fd28db488a0554927e7aefb646eef308c52e81cd8b8a05def7cb30687046fc3596ac
SSDEEP

1536:YgUen+9cZl0TrwbB7BztLGHJM0QlnRx4YUBkE0CS5hpdst99RT:YgUep/tKm0SnZCS5X+tnRT

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1228 1232 WerFault.exe a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe

pid process

1232 a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe

pid	pid_target	process	target process
1228	1232	WerFault.exe	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe

pid	process
1232	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe

description	pid	process	target process
PID 1232 wrote to memory of 1228	1232	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe	WerFault.exe
PID 1232 wrote to memory of 1228	1232	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe	WerFault.exe
PID 1232 wrote to memory of 1228	1232	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe	WerFault.exe
PID 1232 wrote to memory of 1228	1232	a4d8b91449555970230b8c4a8911b0ea2a073bced82e339ff8f01266f449531d.exe	WerFault.exe

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1232 -s 124
2⤵
- Program crash
PID:1228