d34b14b9abbc0dcb5fb4ca9475699a0c39f90351793dbcede2993ad633817a75

Analysis

max time kernel
30s
max time network
35s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
07-07-2023 12:23

Target

4844e3252cea0bexeexeexeex.exe
Size

335KB
MD5

4844e3252cea0bbad442b72e8ba34b7b
SHA1

d9335d4006028e7e48b5ecfbad5eb8917ec630a7
SHA256

d34b14b9abbc0dcb5fb4ca9475699a0c39f90351793dbcede2993ad633817a75
SHA512

4280ae1ba51f3d2fd2d58970352143cde9b7a57f02a7ea753f224c4fa34bd7aa16312e28d92740d1e3a53f6fe16c6e227373d6f20744b0e3a077c9898c67ed04
SSDEEP

6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTS10qhh43Ajrt:qtUGfVwUFzRG6EQ0POfiTTa0qSAjrt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2368 2188 WerFault.exe 4844e3252cea0bexeexeexeex.exe

pid	pid_target	process	target process
2368	2188	WerFault.exe	4844e3252cea0bexeexeexeex.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

4844e3252cea0bexeexeexeex.exe

description	pid	process	target process
PID 2188 wrote to memory of 2368	2188	4844e3252cea0bexeexeexeex.exe	WerFault.exe
PID 2188 wrote to memory of 2368	2188	4844e3252cea0bexeexeexeex.exe	WerFault.exe
PID 2188 wrote to memory of 2368	2188	4844e3252cea0bexeexeexeex.exe	WerFault.exe
PID 2188 wrote to memory of 2368	2188	4844e3252cea0bexeexeexeex.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\4844e3252cea0bexeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\4844e3252cea0bexeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 120
2⤵
- Program crash
PID:2368