e660be79de0932d6c5c0f1b65dc5d842ed790962625d5dd8731c30f46ae264a2

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 10:53

Target

7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe
Size

283KB
MD5

5590a27929430a95249d64c3ddbdb80a
SHA1

6febcbb5f7988dbd48ba56132304ea6fc5cd5328
SHA256

7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289
SHA512

621b089c9b95695775284a34d6a1c6662ead12bc0eca018b7b025b74b9250e7428930ca7b965dc7758b160a3038ee32426555b24e39676f7fa9780debbe09500
SSDEEP

6144:Ajq2C+M4EPVegrdCTGiqa3n3tsIpy9RbM9JzEl:ArC+NUV12X9sIoRbM2l

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1564 2328 WerFault.exe 7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe

pid	pid_target	process	target process
1564	2328	WerFault.exe	7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe

description	pid	process	target process
PID 2328 wrote to memory of 1564	2328	7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe	WerFault.exe
PID 2328 wrote to memory of 1564	2328	7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe	WerFault.exe
PID 2328 wrote to memory of 1564	2328	7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe	WerFault.exe
PID 2328 wrote to memory of 1564	2328	7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe
"C:\Users\Admin\AppData\Local\Temp\7d593823534c8bf5350a484383ae4c14165657f28d693b17a2faa06916c58289.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 96
2⤵
- Program crash
PID:1564

memory/2328-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2328-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download