23da57e09c6003ce6c7bcb75c7086407a0a78efab0c682eab8a15cc223c129a8

Analysis

max time kernel
162s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13-03-2024 23:07

Target

c713d61e0564fd69514b974624cd4ca5.exe
Size

58KB
MD5

c713d61e0564fd69514b974624cd4ca5
SHA1

f9c719533f101a353bc43c46d49be7d1b74a5a74
SHA256

23da57e09c6003ce6c7bcb75c7086407a0a78efab0c682eab8a15cc223c129a8
SHA512

5794b206f75264f315caee12986ce3d3e9091b8158e7686df9e3885ecbbcbc21f2b0915202dd8e5070aa0ed7938c1614589c7dc2c6424e3e94cb46d792da7c1c
SSDEEP

768:qBDZaY795hwSpIkemQSWOQbrADfGLBYe/WntlZqxooZuRkeL8Ul5QcIjTNT/:qBNjnhmkJ0TBYeOtnoZkwa+cIjTB

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2424	936	WerFault.exe	94
4440	936	WerFault.exe	94

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 936 wrote to memory of 2424	936	c713d61e0564fd69514b974624cd4ca5.exe	104
PID 936 wrote to memory of 2424	936	c713d61e0564fd69514b974624cd4ca5.exe	104
PID 936 wrote to memory of 2424	936	c713d61e0564fd69514b974624cd4ca5.exe	104

C:\Users\Admin\AppData\Local\Temp\c713d61e0564fd69514b974624cd4ca5.exe
"C:\Users\Admin\AppData\Local\Temp\c713d61e0564fd69514b974624cd4ca5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:936
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 264
  2⤵
  - Program crash
  PID:2424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 264
  2⤵
  - Program crash
  PID:4440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 936 -ip 936
1⤵
PID:4612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5256 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
1⤵
PID:4036

memory/936-0-0x0000000000400000-0x000000000040F6AB-memory.dmp

Filesize
61KB

Download
memory/936-1-0x0000000000400000-0x000000000040F6AB-memory.dmp

Filesize
61KB

Download