4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
21/08/2023, 08:16

Target

4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe
Size

13.0MB
MD5

f52e5f383eb223daced7a08b5445e427
SHA1

6e317633fa594a898a7783d24bac9cdd02d4a95c
SHA256

4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab
SHA512

a57d627866cfb4479519a0bd633bb1092ec175df7268cb3d17ebccb1a68185cd02efb7ca3600b9b0e339384409297b93a8a58a3cd441d8365488c1b9c6623351
SSDEEP

196608:EPCiohGV4fAHhzEU1hh7KpdqC7MRPOZjsrS1EyBulVdSCQKxqEXVj96ah00iM0gP:CBohC4ezEChh2n57MTj++/D67MLW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1272	2252	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 1272	2252	4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe	30
PID 2252 wrote to memory of 1272	2252	4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe	30
PID 2252 wrote to memory of 1272	2252	4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe	30
PID 2252 wrote to memory of 1272	2252	4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe	30

C:\Users\Admin\AppData\Local\Temp\4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe
"C:\Users\Admin\AppData\Local\Temp\4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 304
  2⤵
  - Program crash
  PID:1272

memory/2252-54-0x0000000000400000-0x0000000001610000-memory.dmp

Filesize
18.1MB

Download
memory/2252-56-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-58-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-61-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-65-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-69-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-73-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-77-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-80-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-81-0x0000000007180000-0x0000000007542000-memory.dmp

Filesize
3.8MB

Download
memory/2252-82-0x0000000000400000-0x0000000001610000-memory.dmp

Filesize
18.1MB

Download