62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 22:29

Target

62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe
Size

32KB
MD5

96d2179b2a80f0c0e2675098a8910d94
SHA1

d2b059d48f9f285a401fc18280e6fe2ca5d48f62
SHA256

62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd
SHA512

b85fe26f78e8ebdc0e0479452b435064f9caba5a31a490c6f10aae102daf0dba3b2364ef298e52f208b1b04673992ba5137fbd26d6096587256409d9d413c51b
SSDEEP

768:0MzGLhdhhohcju3mEIomranZXpDM9t/jSFztE+c:0MmJTu0NanZXpD8t/j023

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2320 2128 WerFault.exe 62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe

pid	pid_target	process	target process
2320	2128	WerFault.exe	62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe

description	pid	process	target process
PID 2128 wrote to memory of 2320	2128	62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe	WerFault.exe
PID 2128 wrote to memory of 2320	2128	62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe	WerFault.exe
PID 2128 wrote to memory of 2320	2128	62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe	WerFault.exe
PID 2128 wrote to memory of 2320	2128	62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe
"C:\Users\Admin\AppData\Local\Temp\62cb2e2a2e22f6604a2238b7722ef46a347b853434f73691bdc20267d5baa8dd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 36
  2⤵
  - Program crash
  PID:2320

memory/2128-0-0x0000000000190000-0x00000000001A3000-memory.dmp

Filesize
76KB

Download