45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16/08/2023, 15:35

Target

45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe
Size

2.8MB
MD5

b18aeefca7d61cc4ef9d42f63161eed2
SHA1

d4bf91204555073b9316133cc1701f697595641e
SHA256

45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f
SHA512

a8938cb833edf08da1a5685cdf052e7136967120900b7a421f35b82e923ad01608cc383187c08edacbbc39d55202f360fe524e462f645b9c236163ca1376e912
SSDEEP

49152:eqU2xi03zDWi26fs2cWDAbclUmHNieqszzW7Si3e3YEJtte:eqU2T0uDhdHk4auVte

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2236	2596	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2596 wrote to memory of 2236	2596	45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe	28
PID 2596 wrote to memory of 2236	2596	45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe	28
PID 2596 wrote to memory of 2236	2596	45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe	28
PID 2596 wrote to memory of 2236	2596	45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe	28

C:\Users\Admin\AppData\Local\Temp\45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe
"C:\Users\Admin\AppData\Local\Temp\45b0b4e3c524aa8047556ff0f5723a2f0bb647699d02e776b37f484238feb54f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2596
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2596 -s 204
  2⤵
  - Program crash
  PID:2236