c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 01:01

Target

c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe
Size

2.7MB
MD5

25f54eae9663e42be1923f75edaac975
SHA1

5174b7583e56e6dc4ff2219d3d40cd940e82b855
SHA256

c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235
SHA512

a7745c03ce1f28e6754d6e232ad5fe353cc8ceadb9af66b2de9b6735b228638838fa2effc7bbbd69f8357f9d5aabd4c9a50a075e9eb966f7af8e6e1795303155
SSDEEP

24576:csn9+gS6uHk1U49HPeT97o+hzy3cHoORwqetii6hsuiWVJFNUIuSc:tLS6uH8UkGT9oHiohS5

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2156 2712 WerFault.exe c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe

pid	pid_target	process	target process
2156	2712	WerFault.exe	c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe

description	pid	process	target process
PID 2712 wrote to memory of 2156	2712	c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe	WerFault.exe
PID 2712 wrote to memory of 2156	2712	c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe	WerFault.exe
PID 2712 wrote to memory of 2156	2712	c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe	WerFault.exe
PID 2712 wrote to memory of 2156	2712	c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe
"C:\Users\Admin\AppData\Local\Temp\c400d85a9904c13160b722f09f9b7a7409c47abe439d48bbebf57b02a4398235.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2712 -s 556
2⤵
- Program crash
PID:2156

memory/2712-1-0x0000000074840000-0x0000000074F2E000-memory.dmp

Filesize
6.9MB

Download
memory/2712-0-0x0000000000090000-0x0000000000344000-memory.dmp

Filesize
2.7MB

Download
memory/2712-2-0x0000000074840000-0x0000000074F2E000-memory.dmp

Filesize
6.9MB

Download