aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
18/08/2023, 04:32

Target

aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe
Size

15.1MB
MD5

5b177601292034cf408d8abbf37e31d7
SHA1

234231228c7f91103a8c479c826396b34f0c5719
SHA256

aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7
SHA512

d30513a452e7d0111d3b171b1d7f19951faa3f2476042e0a39cafdffc4940f8a5c4ce34c322494b21b3161c6db2ebe99770794b6e15f8bf4aa9f4295d7591e03
SSDEEP

196608:I1hCTo8SP73F9gRFOvFWRUUARhxDOgUl8QcnkKpdqC7MRPOZAMe3hmT/KgVbCqdm:I1gT3SPbFaRFOvnUkWl8Bn57M7l0T7l

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2908	2668	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2668 wrote to memory of 2908	2668	aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe	28
PID 2668 wrote to memory of 2908	2668	aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe	28
PID 2668 wrote to memory of 2908	2668	aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe	28
PID 2668 wrote to memory of 2908	2668	aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe	28

C:\Users\Admin\AppData\Local\Temp\aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe
"C:\Users\Admin\AppData\Local\Temp\aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2668 -s 304
  2⤵
  - Program crash
  PID:2908

memory/2668-53-0x0000000000400000-0x0000000001BF9000-memory.dmp

Filesize
24.0MB

Download
memory/2668-54-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-56-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-59-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-63-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-67-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-71-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-75-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-78-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-79-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-80-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-81-0x0000000007390000-0x0000000007752000-memory.dmp

Filesize
3.8MB

Download
memory/2668-82-0x0000000000400000-0x0000000001BF9000-memory.dmp

Filesize
24.0MB

Download