d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 03:28

Target

d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe
Size

236KB
MD5

3d0744b8a5f48e8394218ae90b025180
SHA1

63992493fc30e1262e9827096128aab42aca5280
SHA256

d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47
SHA512

03561af742c1cbb7d3a32760f92b7dec41406eafcd7851a56d0dd98899aa8d3d06ef5ad2eebbef967d1d887fc017d24a33627a7877b445135305307ed005dcd2
SSDEEP

6144:bMwVoejm5JJw20a1bfjVEmAuVy13Ngsk8TH:bp7Za5VsuVy5N9

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2144 1384 WerFault.exe d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe

pid	pid_target	process	target process
2144	1384	WerFault.exe	d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe

description	pid	process	target process
PID 1384 wrote to memory of 2144	1384	d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe	WerFault.exe
PID 1384 wrote to memory of 2144	1384	d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe	WerFault.exe
PID 1384 wrote to memory of 2144	1384	d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe	WerFault.exe
PID 1384 wrote to memory of 2144	1384	d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe
"C:\Users\Admin\AppData\Local\Temp\d55f88782d064395da4df135fecb69b4923fb5dd3e29abda22a61bfe73806d47.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 120
2⤵
- Program crash
PID:2144