4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 12:36

Target

4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe
Size

5KB
MD5

354a7491732b056becda461a1940b683
SHA1

5e2ab15e370fbd37d38a0b5408869e0c209b2ff3
SHA256

4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b
SHA512

486edf0a5ab6dd620fd14bc86aaa033ff15b2bf8430d40d61a6ca794b216e9a5b000f505e04bd7830aa61ebbc846dfd40863740abc654f0582483ad7088737c8
SSDEEP

48:SclXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tORuqSxp:JWLkFfNnOKYloIQ2pm2pbYSCxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
2368	2128	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2368	2128	4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe	14
PID 2128 wrote to memory of 2368	2128	4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe	14
PID 2128 wrote to memory of 2368	2128	4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe	14
PID 2128 wrote to memory of 2368	2128	4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe	14

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 48
1⤵
- Program crash
PID:2368

C:\Users\Admin\AppData\Local\Temp\4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe
"C:\Users\Admin\AppData\Local\Temp\4b5f2d5a9454f778189d8129298cde48d58168de56fe010c79ecd282c6cf552b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128