e538831bf5cf2dcef41c5d04adcbae843ef55b662cc238d4c142c73e89d5ab7f

Analysis

max time kernel
120s
max time network
133s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
31/10/2023, 14:07

Target

5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe
Size

204KB
MD5

48faba12d5f22b62f8473881d5169cb8
SHA1

c0185419ea441a7ade68491786af64353abe8572
SHA256

5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067
SHA512

bf2a511a9ea83df3af99b0f59f5ac269a7c1be485c915a50335de303a656075513d77ca231ee9a8650e1d0c91afc59d86774664bd249ed763ed44f2a4d885f0a
SSDEEP

3072:1DDVvvQUZ/zqlaw0nh8EkQi5gzHNbHYJRPApVFV1Nfg9cj+mw8SuFft8b/SN68Jz:x1QUZ/p7NuRPwN49v8Nt8b/C

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
540	2516	WerFault.exe	24

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 540	2516	5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe	28
PID 2516 wrote to memory of 540	2516	5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe	28
PID 2516 wrote to memory of 540	2516	5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe	28
PID 2516 wrote to memory of 540	2516	5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe	28

C:\Users\Admin\AppData\Local\Temp\5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe
"C:\Users\Admin\AppData\Local\Temp\5cccb22c03299001d60031f288921b672409ef2f62c5202723c002866728b067.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 540
  2⤵
  - Program crash
  PID:540

memory/2516-1-0x0000000074700000-0x0000000074DEE000-memory.dmp

Filesize
6.9MB

Download
memory/2516-0-0x0000000010230000-0x0000000010266000-memory.dmp

Filesize
216KB

Download
memory/2516-2-0x0000000074700000-0x0000000074DEE000-memory.dmp

Filesize
6.9MB

Download