a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
08-11-2023 14:02

Target

2420-1-0x0000000000400000-0x000000000040B000-memory.exe
Size

44KB
MD5

9ed53b9fc28978e0022243574bd9ef90
SHA1

dda728ab1dd50368ed6b6ac07ae1254cb986a2b5
SHA256

a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc
SHA512

f50ff9123191dca3c3e63ec2b93c25916189f726bf0bf3d89e70cce3296bb91989ac19f0078d64c84e360dc57370f9d18b609d39764bd1e15d5dcdb99c79f419
SSDEEP

384:xhnyaz2ypQY5ZkV8qvhyY3Q6oVxYCDCY3WqPakgUt11iyBrUo7MgImBH+Tk:GnHY5ZkO4hyYtoVxYhm1oUt1vnhBL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2288 1744 WerFault.exe 2420-1-0x0000000000400000-0x000000000040B000-memory.exe

pid	pid_target	process	target process
2288	1744	WerFault.exe	2420-1-0x0000000000400000-0x000000000040B000-memory.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

2420-1-0x0000000000400000-0x000000000040B000-memory.exe

description	pid	process	target process
PID 1744 wrote to memory of 2288	1744	2420-1-0x0000000000400000-0x000000000040B000-memory.exe	WerFault.exe
PID 1744 wrote to memory of 2288	1744	2420-1-0x0000000000400000-0x000000000040B000-memory.exe	WerFault.exe
PID 1744 wrote to memory of 2288	1744	2420-1-0x0000000000400000-0x000000000040B000-memory.exe	WerFault.exe
PID 1744 wrote to memory of 2288	1744	2420-1-0x0000000000400000-0x000000000040B000-memory.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\2420-1-0x0000000000400000-0x000000000040B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2420-1-0x0000000000400000-0x000000000040B000-memory.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1744 -s 124
2⤵
- Program crash
PID:2288

memory/1744-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download