93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
20/08/2023, 10:56

Target

93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe
Size

12.4MB
MD5

84bb2fddeb4e80f341cdc24b6b2f4452
SHA1

75cbef81c7aae57589432585b6b79c997f83c0ba
SHA256

93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c
SHA512

07a041fbd4c4367fe2cea31097c8b56aaa29e6fe5e2956855aadd204693aeb46c922016e955493c964a79074313c6308cbb8064c125b23f9b83ea1a940384f7d
SSDEEP

98304:lrk4ZPyKFv2bwgdGGtudvURuHRMXIwzXVWrebEVPl7TVf4KdNXoI8bXnjHqwk2ZM:lrjZKKFehdGGt5XlXVQ5VfJbYI88qE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2196	2572	WerFault.exe	27

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2572 wrote to memory of 2196	2572	93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe	29
PID 2572 wrote to memory of 2196	2572	93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe	29
PID 2572 wrote to memory of 2196	2572	93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe	29

C:\Users\Admin\AppData\Local\Temp\93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe
"C:\Users\Admin\AppData\Local\Temp\93e5910e4a4f9294d4539ff18ae50c71a506c720820f9ac237770830d2322b5c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2572
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2572 -s 100
  2⤵
  - Program crash
  PID:2196