6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339

Analysis

max time kernel
128s
max time network
133s
platform
windows10-1703_x64
resource
win10-20230915-en
resource tags

arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
submitted
05/10/2023, 09:54

Target

6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe
Size

427KB
MD5

00db3e5c86df70cda3df5cd168572834
SHA1

b79d36218b68b06950d4d42fa66db0f8e78b4fd2
SHA256

6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339
SHA512

b61fbd9851d0a39b01bbdd7b6a5af6d7ef642e8a3474c78b460ea2379121820827ea5718fc467618d6b482b55375dca38e9ad35abe6097265b7e1a8e6005b319
SSDEEP

12288:EFjChvXpPdHSF64iODO+7L5vOAKF17YGsa2O:Eg5PZSFhBDO+EAiYGsa2O

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4900	2984	WerFault.exe	69

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2984 wrote to memory of 1940	2984	6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe	70
PID 2984 wrote to memory of 1940	2984	6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe	70
PID 2984 wrote to memory of 1940	2984	6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe	70

C:\Users\Admin\AppData\Local\Temp\6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe
"C:\Users\Admin\AppData\Local\Temp\6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2984
- C:\Users\Admin\AppData\Local\Temp\6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe
  "C:\Users\Admin\AppData\Local\Temp\6f2dc5f3e1b216281fe09bdda656a72d644dc72ab9062724c8ca625846d87339.exe"
  2⤵
  PID:1940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 892
  2⤵
  - Program crash
  PID:4900

memory/2984-0-0x0000000000210000-0x0000000000280000-memory.dmp

Filesize
448KB

Download
memory/2984-1-0x0000000073460000-0x0000000073B4E000-memory.dmp

Filesize
6.9MB

Download
memory/2984-2-0x0000000004B80000-0x0000000004BD2000-memory.dmp

Filesize
328KB

Download
memory/2984-3-0x00000000050D0000-0x00000000055CE000-memory.dmp

Filesize
5.0MB

Download
memory/2984-4-0x0000000004CD0000-0x0000000004D62000-memory.dmp

Filesize
584KB

Download
memory/2984-5-0x0000000004B00000-0x0000000004B10000-memory.dmp

Filesize
64KB

Download
memory/2984-6-0x0000000004C50000-0x0000000004C5A000-memory.dmp

Filesize
40KB

Download
memory/2984-7-0x0000000073460000-0x0000000073B4E000-memory.dmp

Filesize
6.9MB

Download
memory/2984-8-0x0000000004B00000-0x0000000004B10000-memory.dmp

Filesize
64KB

Download