4f5c33b54a841bae7acb0e8216de5120a5b068ac60cfd158eca260d1f83cf067

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-05-2024 08:45

Target

1408_cn_V8.3.0.0/1408_cn_8.3.0.0/InstallDrivers.exe
Size

112KB
MD5

df93c0f3e92b0cc60e59f60fae72cb48
SHA1

24403e64913c5f61de9ff8d3f8390a2422b86660
SHA256

cfadb80d6d57fc668959bfa6debb7b55cb058fc18a974efd2b0caf1dbc1c360d
SHA512

65ff5224136ece78f15297a0a80aec0b18f14f2d9547d3f099e46f70c77813294e85499606f193aa0da677bf5a0ddeb5b538c8075e75eb3a1d7e4ca400902498
SSDEEP

3072:eEukooRHLZU8nEpo+j9fDmmG3oJd+XqNOe:TRZzneoQ9f6mG4yfe

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

500 2364 WerFault.exe InstallDrivers.exe

pid	pid_target	process	target process
500	2364	WerFault.exe	InstallDrivers.exe

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

InstallDrivers.exe

description	pid	process	target process
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe
PID 2364 wrote to memory of 500	2364	InstallDrivers.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\1408_cn_V8.3.0.0\1408_cn_8.3.0.0\InstallDrivers.exe
"C:\Users\Admin\AppData\Local\Temp\1408_cn_V8.3.0.0\1408_cn_8.3.0.0\InstallDrivers.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2364 -s 260
2⤵
- Program crash
PID:500

memory/2364-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2364-1-0x0000000000230000-0x000000000024D000-memory.dmp

Filesize
116KB

Download
memory/2364-2-0x0000000000230000-0x000000000024D000-memory.dmp

Filesize
116KB

Download