2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e

Analysis

max time kernel
118s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 01:10

Target

2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe
Size

2.7MB
MD5

a90687afdd54ea558caf9b047d6e5af8
SHA1

f96970ae6712d0118b07ea421f3f8860e6c80d2e
SHA256

2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e
SHA512

d25d1319f639c0193776a75b471352a64150abd430504c02153acc14bcc94f574ec5195fdd2c215396817d2fbc079161026800f9f03af472670238604b6dd6ea
SSDEEP

24576:zYsn9+gS6uHk1U4YHPeT97o+hzy3cHoORwqetii6hsuiWpJcNRIYNSc:NLS6uH8UhGT9oHioh59Q

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2492 1992 WerFault.exe 2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe

pid	pid_target	process	target process
2492	1992	WerFault.exe	2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe

description	pid	process	target process
PID 1992 wrote to memory of 2492	1992	2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe	WerFault.exe
PID 1992 wrote to memory of 2492	1992	2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe	WerFault.exe
PID 1992 wrote to memory of 2492	1992	2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe	WerFault.exe
PID 1992 wrote to memory of 2492	1992	2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe
"C:\Users\Admin\AppData\Local\Temp\2a320e2d9661d7b56e005cbb2c595d68e5bb42e3d3a28ac88f9abe6c87390d6e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1992

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 556
2⤵
- Program crash
PID:2492

memory/1992-0-0x0000000073D00000-0x00000000743EE000-memory.dmp

Filesize
6.9MB

Download
memory/1992-1-0x00000000001B0000-0x0000000000464000-memory.dmp

Filesize
2.7MB

Download
memory/1992-2-0x0000000073D00000-0x00000000743EE000-memory.dmp

Filesize
6.9MB

Download