29cdac1b1374642a45fd7511d342c38c52eafe4f2bb04520c5c493d298f5e4af

Analysis

max time kernel
28s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
09-07-2023 07:19

Target

82e664660003c6exeexeexeex.exe
Size

335KB
MD5

82e664660003c67ad6a6ba2576a7dc47
SHA1

ab4817588a45a2c55d44a975dc5ffc01ffc43acf
SHA256

29cdac1b1374642a45fd7511d342c38c52eafe4f2bb04520c5c493d298f5e4af
SHA512

86031920f21d3cd481fa8918881e7750a661056e699910ee68c4bd93cb7837049f91ecd7b63f3e6e4842280c68b24445563771b42fa43043d7102c6901c86841
SSDEEP

6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTU10qhh4VAjrt:qtUGfVwUFzRG6EQ0POfiTTU0qgAjrt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2428 2304 WerFault.exe 82e664660003c6exeexeexeex.exe

pid	pid_target	process	target process
2428	2304	WerFault.exe	82e664660003c6exeexeexeex.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

82e664660003c6exeexeexeex.exe

description	pid	process	target process
PID 2304 wrote to memory of 2428	2304	82e664660003c6exeexeexeex.exe	WerFault.exe
PID 2304 wrote to memory of 2428	2304	82e664660003c6exeexeexeex.exe	WerFault.exe
PID 2304 wrote to memory of 2428	2304	82e664660003c6exeexeexeex.exe	WerFault.exe
PID 2304 wrote to memory of 2428	2304	82e664660003c6exeexeexeex.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\82e664660003c6exeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\82e664660003c6exeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 120
2⤵
- Program crash
PID:2428