e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
24/06/2024, 03:53

Target

e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe
Size

156KB
MD5

a88b51f23b273c6a80bfaea34a741a74
SHA1

682aecc055d2c55c530d7a163f45d0a8a8fc3780
SHA256

e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0
SHA512

b8dff6187cdf9c2a84f6befd659041be65c6b6a028ab48a16292479ae92e0a22393a47cf9d66e88ae45094bdc74a5c7a1f3cd6e1c9ab1624f629e93b062a12e5
SSDEEP

3072:r9vGld+Jcdpu1AWUCV7zYFLuMJJ+/ZPrxhIsJGH1wqWIEx1D7:wlHTumBCVsKmJ6rX901wFHt

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3048	2264	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 3048	2264	e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe	28
PID 2264 wrote to memory of 3048	2264	e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe	28
PID 2264 wrote to memory of 3048	2264	e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe	28
PID 2264 wrote to memory of 3048	2264	e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe	28

C:\Users\Admin\AppData\Local\Temp\e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe
"C:\Users\Admin\AppData\Local\Temp\e217a22907017eb19156f6c53e8d69860a87c97c2df1b98cd8d85df68c1ca8b0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2264
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2264 -s 624
  2⤵
  - Program crash
  PID:3048

memory/2264-0-0x0000000074E0E000-0x0000000074E0F000-memory.dmp

Filesize
4KB

Download
memory/2264-1-0x00000000009E0000-0x0000000000A10000-memory.dmp

Filesize
192KB

Download
memory/2264-2-0x0000000000380000-0x000000000039E000-memory.dmp

Filesize
120KB

Download
memory/2264-3-0x0000000074E00000-0x00000000754EE000-memory.dmp

Filesize
6.9MB

Download
memory/2264-4-0x0000000074E0E000-0x0000000074E0F000-memory.dmp

Filesize
4KB

Download
memory/2264-5-0x0000000074E00000-0x00000000754EE000-memory.dmp

Filesize
6.9MB

Download