a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-04-2024 01:57

Target

a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe
Size

2.7MB
MD5

7030a2e8aae462baa3355d5b1d9cf26a
SHA1

35651e4585de4cd8b82ff1f1dbf60766f6eacb7d
SHA256

a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983
SHA512

bdd8e3f5642640bf53f807b80a9787bd96ba44c377343bc586393b08528b77b6fc5a3bc697d1fa7272bedb463a0fd7edcb46c22e4352cee7aaeb1c3a4dc62755
SSDEEP

24576:74sn9+gS6uHk1U48v+hzy3cHoORwqetii6hsuiWZIkNSIzz/cKSc:dLS6uH8UZvHioh4PEr

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2276 1568 WerFault.exe a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe

pid	pid_target	process	target process
2276	1568	WerFault.exe	a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe

description	pid	process	target process
PID 1568 wrote to memory of 2276	1568	a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe	WerFault.exe
PID 1568 wrote to memory of 2276	1568	a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe	WerFault.exe
PID 1568 wrote to memory of 2276	1568	a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe	WerFault.exe
PID 1568 wrote to memory of 2276	1568	a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe
"C:\Users\Admin\AppData\Local\Temp\a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 552
2⤵
- Program crash
PID:2276

memory/1568-1-0x00000000743D0000-0x0000000074ABE000-memory.dmp

Filesize
6.9MB

Download
memory/1568-0-0x0000000000920000-0x0000000000BD4000-memory.dmp

Filesize
2.7MB

Download
memory/1568-2-0x00000000743D0000-0x0000000074ABE000-memory.dmp

Filesize
6.9MB

Download