ee48174864ae0ef8c1e2da6b91b17c2f1df32195f69173adcc3013bf97c76ad5

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-03-2024 16:54

Target

24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe
Size

91KB
MD5

4585ab21cda2fe423663d798a52baf9b
SHA1

b5a9b0c35d25b6a7d1b5478da55f571aece5f2d8
SHA256

24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9
SHA512

b46abc2df4abbd015bf8f11d3969aba34b94a7c3ed237abc0d99be2009fea6446c6a63e0a788d8e7dbfb0445b332ec956b35941c5bb1aaa0e2aa5ffc155bc6e4
SSDEEP

1536:rX3F7wWqPyIMNt6+4aQQg3dTXVyaH8g6C2zzl:rXxwOlLQLGahl6

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2160 2156 WerFault.exe 24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe

pid	pid_target	process	target process
2160	2156	WerFault.exe	24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe

description	pid	process	target process
PID 2156 wrote to memory of 2160	2156	24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe	WerFault.exe
PID 2156 wrote to memory of 2160	2156	24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe	WerFault.exe
PID 2156 wrote to memory of 2160	2156	24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe	WerFault.exe
PID 2156 wrote to memory of 2160	2156	24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe
"C:\Users\Admin\AppData\Local\Temp\24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 100
2⤵
- Program crash
PID:2160