4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 18:33

Target

4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
Size

368KB
MD5

a828a215b29ebde1d8119809676ae4bb
SHA1

b857dc17fb76ab84afdd042770dcbd7f062ba4ad
SHA256

4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c
SHA512

e5ee58451cb4075dc11506e938265c96f3e46fa963f820d8d8002fe6c255939a0b06d65aa1bd0277719ed611d743d2d92353f8977641977de6bba2f81fc84d0e
SSDEEP

6144:PHd2snwZDkCUbuu3zt3FrNPMXDuOYijvafTtfhDV9oUBiljAsC:PHd2sncDkC03JFlMXKujvafTBhDV9mS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2604 3048 WerFault.exe 4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe

pid	pid_target	process	target process
2604	3048	WerFault.exe	4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe

description	pid	process	target process
PID 3048 wrote to memory of 2604	3048	4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe	WerFault.exe
PID 3048 wrote to memory of 2604	3048	4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe	WerFault.exe
PID 3048 wrote to memory of 2604	3048	4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe	WerFault.exe
PID 3048 wrote to memory of 2604	3048	4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
"C:\Users\Admin\AppData\Local\Temp\4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 120
2⤵
- Program crash
PID:2604