56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
12-06-2024 01:28

Target

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe
Size

467KB
MD5

d74e5939e3ad989ab0187c1127f9db3a
SHA1

a2e3697f89cc1c31b4d342dfaddb738f28d420fb
SHA256

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495
SHA512

47824d39685d4b583099bc907881d30736f3a39b7636baf20dab9d480026f87d0b54031fff6ac369bb053f65cfd1f95e83a5a5d0eed84f82c4b1a440f7d6d218
SSDEEP

12288:4w5ZLCWvqJQL9+l9RBG/w/SWFM57OWCd:4w5Z5qJQLwlvOIP0OW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2324 1956 WerFault.exe 56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe

pid	pid_target	process	target process
2324	1956	WerFault.exe	56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe

description	pid	process	target process
PID 1956 wrote to memory of 2324	1956	56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe	WerFault.exe
PID 1956 wrote to memory of 2324	1956	56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe	WerFault.exe
PID 1956 wrote to memory of 2324	1956	56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe	WerFault.exe
PID 1956 wrote to memory of 2324	1956	56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe
"C:\Users\Admin\AppData\Local\Temp\56ad460c63c005e8049142132ffa08c7c30f2fe9dbd24c60ff746c2e61138495.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 148
2⤵
- Program crash
PID:2324

memory/1956-0-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/1956-1-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download