d4fd84db4cd115337bc9d97179df644966942b5f0574e0df6551cf32cfd869a2

Resubmissions

27-05-2024 17:32

27-05-2024 17:31

max time kernel
17s
max time network
17s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
27-05-2024 17:31

Target

EacDriverBE.exe
Size

11KB
MD5

c6b2c74b647dcbbea223c51925c5c7dd
SHA1

071fa2b1394d2c95553149fd5eb643e0291927b3
SHA256

c5f1d37d96ed0788783f626a376144f85887a182155fed3b637744d9d9215a22
SHA512

ff1d378751d2722c165293b1dbefccc9aad42cb653f20178bbcbbc3318d6da0592e9099b7030f268c7cd60bc3e782ed2d66ddbf485391596f659b1e4c3c47b6c
SSDEEP

192:5S8JnK2fj6JIFjsJwpVwP456gijoVIgMa42JjrUxF59ooFIda:5S92L5FIJw/wgAjE7MeJvYooFi

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1672 2184 WerFault.exe EacDriverBE.exe

pid	pid_target	process	target process
1672	2184	WerFault.exe	EacDriverBE.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

EacDriverBE.exe

description	pid	process	target process
PID 2184 wrote to memory of 1672	2184	EacDriverBE.exe	WerFault.exe
PID 2184 wrote to memory of 1672	2184	EacDriverBE.exe	WerFault.exe
PID 2184 wrote to memory of 1672	2184	EacDriverBE.exe	WerFault.exe
PID 2184 wrote to memory of 1672	2184	EacDriverBE.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\EacDriverBE.exe
"C:\Users\Admin\AppData\Local\Temp\EacDriverBE.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 592
2⤵
- Program crash
PID:1672

memory/2184-0-0x000000007413E000-0x000000007413F000-memory.dmp

Filesize
4KB

Download
memory/2184-1-0x00000000000C0000-0x00000000000CA000-memory.dmp

Filesize
40KB

Download
memory/2184-2-0x0000000000350000-0x000000000036A000-memory.dmp

Filesize
104KB

Download
memory/2184-3-0x0000000000370000-0x000000000037A000-memory.dmp

Filesize
40KB

Download
memory/2184-4-0x0000000074130000-0x000000007481E000-memory.dmp

Filesize
6.9MB

Download
memory/2184-5-0x0000000074130000-0x000000007481E000-memory.dmp

Filesize
6.9MB

Download