fe5cccdc0bb349872a7844ab9e325c92df7fb53098d5815c59c2ce9cf8221f57

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09-01-2024 11:02

Target

4e20890c99984427af707c4fd39fe504.exe
Size

49KB
MD5

4e20890c99984427af707c4fd39fe504
SHA1

1728d5c952e321b6bde3b5095db01ae2e1ce4dd0
SHA256

fe5cccdc0bb349872a7844ab9e325c92df7fb53098d5815c59c2ce9cf8221f57
SHA512

a85308451ce53414252248925fc7fb47b9a06d218a6a478cf240b4f274baab9db9b90c397fe7762b38eb49ae55604d9cc0f71f72a19ce1e5f1831650c6ece8dd
SSDEEP

768:LMG4CLbShgU2l1S0Zff8OHInp2lhsA5jvKjdCijxzHXj306KULcI3Atxn8tQzk:gCbShgrK6f8OoXcsNbLJKUQI3Atxn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2360	2352	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2360	2352	4e20890c99984427af707c4fd39fe504.exe	24
PID 2352 wrote to memory of 2360	2352	4e20890c99984427af707c4fd39fe504.exe	24
PID 2352 wrote to memory of 2360	2352	4e20890c99984427af707c4fd39fe504.exe	24
PID 2352 wrote to memory of 2360	2352	4e20890c99984427af707c4fd39fe504.exe	24

C:\Users\Admin\AppData\Local\Temp\4e20890c99984427af707c4fd39fe504.exe
"C:\Users\Admin\AppData\Local\Temp\4e20890c99984427af707c4fd39fe504.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 64
  2⤵
  - Program crash
  PID:2360