e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-05-2024 21:34

Target

e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe
Size

1.5MB
MD5

1fedae07e7c7a058b9df5031a6ca261a
SHA1

9a4e03aa114f6e65a7f114812bf91f717fc74bc3
SHA256

e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387
SHA512

4d32763bb9d5bef1d5af248ee5d0f88dc8544c39b4e83a31f2ea555ea7fe6b7568bf391acbd237f90ae8ffba532d07bbcf98d8a2ab2bbd36ad3e87255b48e3f8
SSDEEP

24576:hAPSJg6Wh6tviZuFqm4Pjl6CcAFiyTunyjfOnJkM5lopxQ+CMtRsK4iVHS6:aKM/vPxhTy6

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2332 2368 WerFault.exe e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe

pid	pid_target	process	target process
2332	2368	WerFault.exe	e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe

description	pid	process	target process
PID 2368 wrote to memory of 2332	2368	e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe	WerFault.exe
PID 2368 wrote to memory of 2332	2368	e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe	WerFault.exe
PID 2368 wrote to memory of 2332	2368	e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe	WerFault.exe
PID 2368 wrote to memory of 2332	2368	e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe
"C:\Users\Admin\AppData\Local\Temp\e64fb963200b856cfe03faa7f1204826cdd23110a08fed9d84aabff92c5ea387.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 196
2⤵
- Program crash
PID:2332