f66854431dc57070e060e776be18cba0992366fab22b71f8cf929b91c81a6c26

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 14:27

Target

52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe
Size

274KB
MD5

3b2f6dcd799e06d8804c55bc9128b9f4
SHA1

67bfd5573dc98910ab128d825d92c16fa29c48c8
SHA256

52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea
SHA512

05db7c5138366ff685398a45be1fab7bfec70967f116babb1ebbdc15a112cb28964efa7ba614b9d9cc76dedddf4974d057432bc5b1882e1379c426db930a521c
SSDEEP

6144:0JeaoQWhlmgE5pdj7yKUtYowTgEd71anT7fxwp/:ceaZpp57yKuY5TgO4T+p/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2436 1500 WerFault.exe 52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe

pid	pid_target	process	target process
2436	1500	WerFault.exe	52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe

description	pid	process	target process
PID 1500 wrote to memory of 2436	1500	52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe	WerFault.exe
PID 1500 wrote to memory of 2436	1500	52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe	WerFault.exe
PID 1500 wrote to memory of 2436	1500	52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe	WerFault.exe
PID 1500 wrote to memory of 2436	1500	52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe
"C:\Users\Admin\AppData\Local\Temp\52d5102aa94d913408cacb8480a5007f4757bac252d6379b467616eb62442eea.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 120
2⤵
- Program crash
PID:2436

memory/1500-0-0x0000000000270000-0x00000000002CB000-memory.dmp

Filesize
364KB

Download