88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 23:59

Target

88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe
Size

968KB
MD5

f2c942040b4d0e03f7f983d1b6f64919
SHA1

a93e48b8ae50346d1a09f09affb3552da6a48cea
SHA256

88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257
SHA512

eeddb72f3aa5a42043a88a13b738f12e15b58e95e283c6a9c38f44ef9fdbc58f0f25344b88682d2254bef422d38fd1a002b6771d7d43d9a2cb5d4b0f4ce28a82
SSDEEP

12288:q4GKMpv8UhbwcJZV3MlgdXbDXwQ2xgO1co5VPzGu/nGrzY:rCpv8gbw0MlDQ22o/yyGrz

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2120 2588 WerFault.exe 88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe

pid	pid_target	process	target process
2120	2588	WerFault.exe	88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe

description	pid	process	target process
PID 2588 wrote to memory of 2120	2588	88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe	WerFault.exe
PID 2588 wrote to memory of 2120	2588	88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe	WerFault.exe
PID 2588 wrote to memory of 2120	2588	88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe	WerFault.exe
PID 2588 wrote to memory of 2120	2588	88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe
"C:\Users\Admin\AppData\Local\Temp\88769ea52d63c84d2fda9c8d17fd83eed5ac625c9541e50e16dedf1e52e19257.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2588 -s 208
2⤵
- Program crash
PID:2120