52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 22:37

Target

52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe
Size

214KB
MD5

804a410ba5c3a1104f506af41b1fcb04
SHA1

58697b2be13b484244a9bab51a5a7e7323bd92e2
SHA256

52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b
SHA512

33bfc86194c8951290d6e29a5b4c36858216e5663d1685dc8222b2f32c4d9d86053fe3b9a5fbf6919ed8b094cfaaaa645d0b214e256051a609c46de7208bd748
SSDEEP

3072:Sk2iqPAUBBh1z6iEY+WPSTleOknht+HT:Sk2iY951EgKTlsX+H

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
552	2844	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2844 wrote to memory of 552	2844	52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe	28
PID 2844 wrote to memory of 552	2844	52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe	28
PID 2844 wrote to memory of 552	2844	52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe	28
PID 2844 wrote to memory of 552	2844	52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe	28

C:\Users\Admin\AppData\Local\Temp\52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe
"C:\Users\Admin\AppData\Local\Temp\52c04b64b31bebc5e05a7857c57b6931e3f9328006aaa3d5af9a384b2b201a8b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2844 -s 660
  2⤵
  - Program crash
  PID:552

memory/2844-0-0x0000000074BAE000-0x0000000074BAF000-memory.dmp

Filesize
4KB

Download
memory/2844-1-0x00000000011A0000-0x00000000011DC000-memory.dmp

Filesize
240KB

Download
memory/2844-2-0x0000000074BA0000-0x000000007528E000-memory.dmp

Filesize
6.9MB

Download
memory/2844-3-0x0000000074BAE000-0x0000000074BAF000-memory.dmp

Filesize
4KB

Download
memory/2844-4-0x0000000074BA0000-0x000000007528E000-memory.dmp

Filesize
6.9MB

Download