031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 08:01

Target

031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe
Size

459KB
MD5

07c57ef6bdc91e2b41f1b2f66a8a7454
SHA1

6d692cb77f5e42a9dc6c87e9909f23960300a750
SHA256

031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf
SHA512

710429aa161e94c10e6b02c678fc74541ba68e0fd5a223dcb953b32d145cb6c2e6b26a1e44cddc48768b53918cb28fb3e438ff7d6e9b68016ffc7d19c4f84077
SSDEEP

12288:krGmtDcvAPVLiZhv2dMe6y5rkJ2h7tfmee:qD7PVWZV+9kJg7z

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1724 1644 WerFault.exe 031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe

pid	pid_target	process	target process
1724	1644	WerFault.exe	031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe

description	pid	process	target process
PID 1644 wrote to memory of 1724	1644	031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe	WerFault.exe
PID 1644 wrote to memory of 1724	1644	031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe	WerFault.exe
PID 1644 wrote to memory of 1724	1644	031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe	WerFault.exe
PID 1644 wrote to memory of 1724	1644	031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe
"C:\Users\Admin\AppData\Local\Temp\031907cc7c4110bef4f7a36c95c26aa1a8155293e49c1d1c6851b477aff693bf.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 48
2⤵
- Program crash
PID:1724

memory/1644-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1644-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download