9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:01

Target

9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe
Size

1.1MB
MD5

a35286aa2c1db4e6aaa021e4b63493fe
SHA1

8b34e514c33fccfcdc45cd5538e2ae7887ad382e
SHA256

9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1
SHA512

0ef5811f282f86d0bad655bb7e1257997e80cb9a841c067f66c4804c18bf10d430ef50c1e26c43fda695868fba1f5787cfa4457d22d9753fd7f0f3916ff8090c
SSDEEP

12288:BdfSPI+0Cmb89dyuPy7aIiQ9v6t6Ivt9+/G+E4h/9LwBwgic25v+LpPzw6DevF/x:fqiU0siaj2jU3+/G+nLwBq51+ge7s

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2144 844 WerFault.exe 9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe

pid	pid_target	process	target process
2144	844	WerFault.exe	9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe

description	pid	process	target process
PID 844 wrote to memory of 2144	844	9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe	WerFault.exe
PID 844 wrote to memory of 2144	844	9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe	WerFault.exe
PID 844 wrote to memory of 2144	844	9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe	WerFault.exe
PID 844 wrote to memory of 2144	844	9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe
"C:\Users\Admin\AppData\Local\Temp\9bdde85bd3e9e9fc18de6cf913e0c8fb299e4d228ce894d6728221316ad7c4b1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 208
2⤵
- Program crash
PID:2144