5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 10:11

Target

5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe
Size

113KB
MD5

fd48d5bbb9e96c814d8f0f4af008febe
SHA1

939267778d3b8d6cbfc2212ad954bf87cc63dbed
SHA256

5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac
SHA512

7b4f9de7f09d28f085d83efc9e33772bb04854569d3274e79e64bff571529591f2c1b543710680be8b0318095811a7d817c65f20483d29b92fa36195090b4edf
SSDEEP

1536:jiinKRUU2csfWQ42ZRsy/sJ1GYrcSTwnQOG4N4guze0DzzzzzzzzzzzGK/Dzzzzu:jiDRUU2Jv/ZIJ1ZN0nQvzf2S2k2v

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3064	2812	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 3064	2812	5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe	28
PID 2812 wrote to memory of 3064	2812	5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe	28
PID 2812 wrote to memory of 3064	2812	5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe	28
PID 2812 wrote to memory of 3064	2812	5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe	28

C:\Users\Admin\AppData\Local\Temp\5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe
"C:\Users\Admin\AppData\Local\Temp\5aecd9e1e367412672e8451c1582e135505baf6eb41cd99b866070f5dad45cac.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2812 -s 632
  2⤵
  - Program crash
  PID:3064

memory/2812-0-0x0000000000FB0000-0x0000000000FD2000-memory.dmp

Filesize
136KB

Download
memory/2812-1-0x00000000742E0000-0x00000000749CE000-memory.dmp

Filesize
6.9MB

Download
memory/2812-2-0x0000000004980000-0x00000000049C0000-memory.dmp

Filesize
256KB

Download
memory/2812-3-0x00000000742E0000-0x00000000749CE000-memory.dmp

Filesize
6.9MB

Download
memory/2812-4-0x0000000004980000-0x00000000049C0000-memory.dmp

Filesize
256KB

Download