463d172bfbb2c7da9a76cdd4dd41d881ca4c2debbd6f494a5ef09aa6623d7707

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 20:33

Target

5483a14c0e081c8ca3ae6bb9cd7c9af4.exe
Size

12KB
MD5

5483a14c0e081c8ca3ae6bb9cd7c9af4
SHA1

730bd9b745c180d632f5639cc5c72ce818b7d9e4
SHA256

463d172bfbb2c7da9a76cdd4dd41d881ca4c2debbd6f494a5ef09aa6623d7707
SHA512

78579e1d91aa79c7531502e2aa495e33a058d66c93a4ebfc1dd3f7def981589ea9bc741e29c1e1f8b73a37b25b5e19be84a5ceddbdba321e50cf6c30ac1f5e96
SSDEEP

96:cz/2MWdC//c0+/OugGmec/AzNyXyeP71yQtQKQYQ:cb2MTf+/OEmecYzgiQ7MQjQYQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2276	3012	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 2276	3012	5483a14c0e081c8ca3ae6bb9cd7c9af4.exe	16
PID 3012 wrote to memory of 2276	3012	5483a14c0e081c8ca3ae6bb9cd7c9af4.exe	16
PID 3012 wrote to memory of 2276	3012	5483a14c0e081c8ca3ae6bb9cd7c9af4.exe	16
PID 3012 wrote to memory of 2276	3012	5483a14c0e081c8ca3ae6bb9cd7c9af4.exe	16

C:\Users\Admin\AppData\Local\Temp\5483a14c0e081c8ca3ae6bb9cd7c9af4.exe
"C:\Users\Admin\AppData\Local\Temp\5483a14c0e081c8ca3ae6bb9cd7c9af4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3012 -s 88
  2⤵
  - Program crash
  PID:2276