ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:52

Target

ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
Size

35KB
MD5

f2caef925db690f60f4427ee6d724b14
SHA1

0a43e47d2357139093dd04e222726466d909e3c5
SHA256

ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47
SHA512

1fef2b9f4822a1299207fbf597eba41e029d62e7a23428f23480db20cb4e58a5d09136f756b9cfc8b1faae9602d2c788401cd4a8baf3e3b7d6ebde0ea8e03618
SSDEEP

768:yObRtFB4KhRvzGdgpH8tyfiQeOPRz2LWUMZX/8q:9dvxVLd8tuXeOZaLZgEq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2968 2860 WerFault.exe ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe

pid	pid_target	process	target process
2968	2860	WerFault.exe	ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe

description	pid	process	target process
PID 2860 wrote to memory of 2968	2860	ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe	WerFault.exe
PID 2860 wrote to memory of 2968	2860	ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe	WerFault.exe
PID 2860 wrote to memory of 2968	2860	ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe	WerFault.exe
PID 2860 wrote to memory of 2968	2860	ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
"C:\Users\Admin\AppData\Local\Temp\ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2860 -s 88
2⤵
- Program crash
PID:2968