934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23-01-2024 01:15

Target

934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe
Size

2.7MB
MD5

2ec32cca397a92fc548f68f81bdc32eb
SHA1

1c7bfe6d20007f32073fa808cc7658501722d3ad
SHA256

934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a
SHA512

638f6c5a3052d375754856f9fce41c6e14c95908769fe9b5eda73b8f8865b51000276b0e0878c51fafdb80744bc94f3e16078530da38dbba6d5b4d10b3c2b008
SSDEEP

24576:fsn9+gS6uHk1U4hHPeT97o+hzy3cHoORwqetii6hsuiWtJFNEIYHqSc:ULS6uH8UuGT9oHiohGSHL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2704 3016 WerFault.exe 934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe

pid	pid_target	process	target process
2704	3016	WerFault.exe	934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe

description	pid	process	target process
PID 3016 wrote to memory of 2704	3016	934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe	WerFault.exe
PID 3016 wrote to memory of 2704	3016	934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe	WerFault.exe
PID 3016 wrote to memory of 2704	3016	934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe	WerFault.exe
PID 3016 wrote to memory of 2704	3016	934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe
"C:\Users\Admin\AppData\Local\Temp\934719eb9432fc5946903659595eb25f6ece3d511c5c12c47edc5460b32d362a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3016 -s 548
2⤵
- Program crash
PID:2704

memory/3016-0-0x0000000000A80000-0x0000000000D34000-memory.dmp

Filesize
2.7MB

Download
memory/3016-1-0x0000000073EC0000-0x00000000745AE000-memory.dmp

Filesize
6.9MB

Download
memory/3016-2-0x0000000073EC0000-0x00000000745AE000-memory.dmp

Filesize
6.9MB

Download