d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 01:25

Target

d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
Size

2.7MB
MD5

a595e14827801c600ab105c2a12618da
SHA1

b6a306d531a3848a28bc9cf88794853eeca1e6ba
SHA256

d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500
SHA512

34aeb4d98269de945d2db94f63080062e491e7565fd87660678ae9aad2ca684400d39454e951bc75b0c4bd6d7072c65c108324823aa606f35ce44c6f4af93a62
SSDEEP

24576:V/sn9+gS6uHk1U4QR+hzy3cHoORwqetii6hsuiWvIkNQIb6PXSc:WLS6uH8U5RHiohWR6a

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

592 2140 WerFault.exe d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe

pid	pid_target	process	target process
592	2140	WerFault.exe	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe

description	pid	process	target process
PID 2140 wrote to memory of 592	2140	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe	WerFault.exe
PID 2140 wrote to memory of 592	2140	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe	WerFault.exe
PID 2140 wrote to memory of 592	2140	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe	WerFault.exe
PID 2140 wrote to memory of 592	2140	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
"C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2140

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 556
2⤵
- Program crash
PID:592

memory/2140-1-0x00000000002A0000-0x0000000000554000-memory.dmp

Filesize
2.7MB

Download
memory/2140-0-0x0000000073F60000-0x000000007464E000-memory.dmp

Filesize
6.9MB

Download
memory/2140-2-0x0000000073F60000-0x000000007464E000-memory.dmp

Filesize
6.9MB

Download