d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 01:06

Target

d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe
Size

2.7MB
MD5

82a9ac1560d592267d624b7c68e89da5
SHA1

c3ee16a1a8803e24cbf77ebe9abd155aee5bf544
SHA256

d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b
SHA512

b1840a534e56ceb4032f8ec2e13111167a28ff15cdb3d76e992aa8f35153cd5455ec99a76cf96760fa2c570811360d7c39e1e0bb01fec99b7953e53a3d01704b
SSDEEP

24576:x/sn9+gS6uHk1U4yE+hzy3cHoORwqetii6hsuiW6IkNXIv6pXSc:SLS6uH8UfEHiohhG6k

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2024 2204 WerFault.exe d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe

pid	pid_target	process	target process
2024	2204	WerFault.exe	d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe

description	pid	process	target process
PID 2204 wrote to memory of 2024	2204	d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe	WerFault.exe
PID 2204 wrote to memory of 2024	2204	d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe	WerFault.exe
PID 2204 wrote to memory of 2024	2204	d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe	WerFault.exe
PID 2204 wrote to memory of 2024	2204	d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe
"C:\Users\Admin\AppData\Local\Temp\d053d475a6ea716c75fca2a4ada013a63a8ef081e3abb44da8747804246fb83b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 552
2⤵
- Program crash
PID:2024

memory/2204-0-0x0000000000820000-0x0000000000AD4000-memory.dmp

Filesize
2.7MB

Download
memory/2204-1-0x00000000745D0000-0x0000000074CBE000-memory.dmp

Filesize
6.9MB

Download
memory/2204-2-0x00000000745D0000-0x0000000074CBE000-memory.dmp

Filesize
6.9MB

Download