177961a533ecdae6533b3d8e3ee92243fca8e81c7490f739b005ff1b9e6e0b95

Analysis

max time kernel
141s
max time network
124s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
31/10/2023, 14:18

Target

75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe
Size

2.9MB
MD5

adfa82573f0b19a4cee9b627e40801a6
SHA1

ce8f5c549432d9de0605843c23c6012e55a5ea93
SHA256

75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2
SHA512

52bc4dd10f614ca63e040053964168e6ed4293cf38d8841c8bae487b8c2cb988f8d970cf9692d44c05dd60f392b627bd7e42b3ae33831b9d39bf0a5ece61d631
SSDEEP

49152:w7OntU7dLEm957rRhYh8M7HMZqknsgmTWoI99rL9m++ZdjtoyS41DvbEnPAj8Xr/:w7OntMdLPXpI+nsgmTWo+hMdjtEAC7/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	2220	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2316	2220	75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe	28
PID 2220 wrote to memory of 2316	2220	75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe	28
PID 2220 wrote to memory of 2316	2220	75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe	28
PID 2220 wrote to memory of 2316	2220	75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe	28

C:\Users\Admin\AppData\Local\Temp\75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe
"C:\Users\Admin\AppData\Local\Temp\75887ef232cf91499b1fdda50081f8820203588e7aa4e59759bd25c1534815b2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 616
  2⤵
  - Program crash
  PID:2316

memory/2220-0-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-1-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-2-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-4-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-3-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-5-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-6-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-7-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2220-9-0x0000000000400000-0x0000000000F14000-memory.dmp

Filesize
11.1MB

Download
memory/2220-10-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download