0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
09-10-2023 02:47

Target

0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe
Size

12.5MB
MD5

438f4f8eae44e659849723971585aed8
SHA1

3d20ab76070d66a7651a38ecb1a25d6b766a363d
SHA256

0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012
SHA512

a6f90262fee34e81557ed2e0353c75304c02dcce87621db509a964b50a38e6601bf3b7efeca952fe14cbf32aba39b45208488566d0bd69615a16f12c1b2af457
SSDEEP

393216:iV5KLEJeIi0jnTn57MsKxdIGbvZGmffHR:iV5Je3qTn5MA03p

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2584	3048	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3048 wrote to memory of 2584	3048	0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe	28
PID 3048 wrote to memory of 2584	3048	0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe	28
PID 3048 wrote to memory of 2584	3048	0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe	28
PID 3048 wrote to memory of 2584	3048	0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe	28

C:\Users\Admin\AppData\Local\Temp\0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe
"C:\Users\Admin\AppData\Local\Temp\0a4151cb4f2c4bc539e3011cc7f0aea3a099dd78bae952e47072ba5a26a67012.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3048
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 304
  2⤵
  - Program crash
  PID:2584

memory/3048-0-0x0000000000400000-0x0000000001625000-memory.dmp

Filesize
18.1MB

Download
memory/3048-1-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-3-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-6-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-10-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-14-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-18-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-22-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-25-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-26-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-27-0x0000000004900000-0x0000000004CC2000-memory.dmp

Filesize
3.8MB

Download
memory/3048-28-0x0000000000400000-0x0000000001625000-memory.dmp

Filesize
18.1MB

Download