aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-04-2024 01:47

Target

aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe
Size

1.2MB
MD5

91a6507a51ddcf98f542e89c58b9a17e
SHA1

870a96273698fc67cf145a7601fc3892671eea22
SHA256

aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a
SHA512

cdc5aa3b28e69e119c1415ce760d6cd6633eb5ab98834d609ec198b212614ad49d1f9e5c11f44507522eaf7b1bf39d5d9d20064df5259a358951e15f05154e48
SSDEEP

24576:zkeQ/Joxh1oVZM8YWmwZ+Y3DkUU78T0KPTXBsn1F9/GAApP1aqNt+:Xxh1oVZMY31snDNrABYqS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2956 2252 WerFault.exe aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe

pid	pid_target	process	target process
2956	2252	WerFault.exe	aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe

description	pid	process	target process
PID 2252 wrote to memory of 2956	2252	aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe	WerFault.exe
PID 2252 wrote to memory of 2956	2252	aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe	WerFault.exe
PID 2252 wrote to memory of 2956	2252	aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe	WerFault.exe
PID 2252 wrote to memory of 2956	2252	aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe
"C:\Users\Admin\AppData\Local\Temp\aca438e378d0fd7abdb1fc1f7cc9acdc279dbd399fda98f8078a99a4a24e537a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 68
  2⤵
  - Program crash
  PID:2956

memory/2252-0-0x0000000000270000-0x000000000039F000-memory.dmp

Filesize
1.2MB

Download