890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 13:15

Target

890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe
Size

571KB
MD5

fba7a7675a7db49f2e2d06c74912a706
SHA1

65a3f37e4db1b4b4831a69f326041749c823e948
SHA256

890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700
SHA512

9943a94d0f5ff63d01ea952bd6a196dc30ad4d719d1757ad444db52534526902abf90b5df9b1e58acdc3f5fb4a2f11e4df2c37bf380fc50b17be96b294c39411
SSDEEP

12288:pqCoQ0GNl9Rq02xC6mV5SmXfJuJ191hyNySM:3RRd2xC6mVoewhoyv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2360 2116 WerFault.exe 890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe

pid	pid_target	process	target process
2360	2116	WerFault.exe	890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe

description	pid	process	target process
PID 2116 wrote to memory of 2360	2116	890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe	WerFault.exe
PID 2116 wrote to memory of 2360	2116	890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe	WerFault.exe
PID 2116 wrote to memory of 2360	2116	890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe	WerFault.exe
PID 2116 wrote to memory of 2360	2116	890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe
"C:\Users\Admin\AppData\Local\Temp\890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2116 -s 48
2⤵
- Program crash
PID:2360

memory/2116-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2116-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download