4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 04:33

Target

4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe
Size

5KB
MD5

0f17dfdde717fb12cd71a0728c7d6b90
SHA1

362160373f5535103ac0afabae0b938840b15173
SHA256

4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e
SHA512

5eaa9e0d8d539b8a84ec63d3e3929b9181f86ec992d957826f57f369b9cd526d19abf8341f6a0d656614de5572e9fd43789a742dc7533cff2a0e29dfa0b8e1db
SSDEEP

48:S6lXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t7RuqSxp:/WLkFfNnOKYloIQ2pm2pbYSJxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2120	2768	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2768 wrote to memory of 2120	2768	4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe	28
PID 2768 wrote to memory of 2120	2768	4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe	28
PID 2768 wrote to memory of 2120	2768	4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe	28
PID 2768 wrote to memory of 2120	2768	4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe	28

C:\Users\Admin\AppData\Local\Temp\4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe
"C:\Users\Admin\AppData\Local\Temp\4fc9900db1b4b312257c29c2e6fbc37a2dafe459b55572dd0430a396f6cfd41e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2768
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 48
  2⤵
  - Program crash
  PID:2120