39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 20:34

Target

39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe
Size

868KB
MD5

04d581346e174a82ba61d8df7a1048be
SHA1

890c9fedf60e94eaf93f7d255e0d9e2080215d70
SHA256

39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa
SHA512

63ab663de76f4a3ece34422e3d8e5636fc0b8b9c90972113e850cd0ee5cd0848e6b3a840b79f67e70f4b2054a223dfb4b8aa5214ef5a6eb6438e0248e4195f2b
SSDEEP

12288:4idlTCbw+5/E63tXXiKyUmkMK1k3x2d60RwZs708FGH5sepakFd3B:X2/E6dCKZmkM0360RwZ/EAR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

844 2748 WerFault.exe 39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe

pid	pid_target	process	target process
844	2748	WerFault.exe	39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe

description	pid	process	target process
PID 2748 wrote to memory of 844	2748	39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe	WerFault.exe
PID 2748 wrote to memory of 844	2748	39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe	WerFault.exe
PID 2748 wrote to memory of 844	2748	39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe	WerFault.exe
PID 2748 wrote to memory of 844	2748	39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe
"C:\Users\Admin\AppData\Local\Temp\39828af188a7a92f6911233513967102f47ce05605c7e81af2b1b3bef7d623aa.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 208
2⤵
- Program crash
PID:844