53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 21:34

Target

53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe
Size

229KB
MD5

57b1e11a1662772bfc9c3eed7e16feff
SHA1

322eb7b0096a857a56b2aaaff83d4b801f4393c3
SHA256

53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e
SHA512

844539759d25242c316f5a95a0345e0707d15e783ebd4b454fb6040e703c5b5f890e92b72939b467376dd0452cf4a455b8e883c131c0de533a57748c4eca068d
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShp1Jm2X1:rBKE6LguFSVJ/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2652 2252 WerFault.exe 53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe

pid	pid_target	process	target process
2652	2252	WerFault.exe	53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe

description	pid	process	target process
PID 2252 wrote to memory of 2652	2252	53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe	WerFault.exe
PID 2252 wrote to memory of 2652	2252	53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe	WerFault.exe
PID 2252 wrote to memory of 2652	2252	53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe	WerFault.exe
PID 2252 wrote to memory of 2652	2252	53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe
"C:\Users\Admin\AppData\Local\Temp\53d60612fba72fbd43484165601429249b3aba0e271a533d3b7437eaf591db0e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 120
2⤵
- Program crash
PID:2652