e19e97a334ecb39058fd976080222a46cc2159e34c85df371a9eaf0088ee80eb

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 10:44

Target

4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe
Size

265KB
MD5

e1476c92f1281ba69cabef1c7c9bb1cd
SHA1

81c5c47061f07e9723d71aa4489bfea039959a08
SHA256

4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c
SHA512

8e9faac4b123c5ca518f773ae24a5b1013376863645524b55ed5b44bc2a005f7fb4c266d2ff1a29c1ac64ee135b5714ef98d4c34786a9c4765bbc4c3426bdc46
SSDEEP

6144:3ZrHgDcXDXO5TGgwkOlqDJL0DVG03ahms6up:3ZHgDcBsNaVzq8Zup

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2236 1700 WerFault.exe 4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe

pid	pid_target	process	target process
2236	1700	WerFault.exe	4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe

description	pid	process	target process
PID 1700 wrote to memory of 2236	1700	4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe	WerFault.exe
PID 1700 wrote to memory of 2236	1700	4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe	WerFault.exe
PID 1700 wrote to memory of 2236	1700	4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe	WerFault.exe
PID 1700 wrote to memory of 2236	1700	4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe
"C:\Users\Admin\AppData\Local\Temp\4431aa7413f5833360f953b5d26f7cceefeb1dfd20705856a7c02d106943048c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1700
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1700 -s 48
  2⤵
  - Program crash
  PID:2236

memory/1700-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1700-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download