5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25-06-2024 14:36

Target

5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe
Size

2.2MB
MD5

f46170a9d14e2d3e6aa30dc8dee4c62e
SHA1

7dd2f958fbc9603df1fc53bce3e4fa50462a0f37
SHA256

5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a
SHA512

e1b7c53c03c7806cf1f5604c901a789a796fbc61e8b4169c0456c8ff1b587eed74e760225d4567bf5daa0f85861208d05a3f1c933d9cac6d152c1fff18b56c6b
SSDEEP

49152:YFjFloYUJnKoxR09bD25kyV2lj+WTQO6PW/R6Nq:YFpHUJnJxu9PZyVgTX6Pu2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2708	1052	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1052 wrote to memory of 2708	1052	5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe	28
PID 1052 wrote to memory of 2708	1052	5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe	28
PID 1052 wrote to memory of 2708	1052	5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe	28
PID 1052 wrote to memory of 2708	1052	5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe	28

C:\Users\Admin\AppData\Local\Temp\5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe
"C:\Users\Admin\AppData\Local\Temp\5a6c4ce2269a96e5e88fdcd272f0a231507506573f4213491329463af6bc901a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1052
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1052 -s 632
  2⤵
  - Program crash
  PID:2708

memory/1052-0-0x0000000074BCE000-0x0000000074BCF000-memory.dmp

Filesize
4KB

Download
memory/1052-1-0x0000000000320000-0x000000000054E000-memory.dmp

Filesize
2.2MB

Download
memory/1052-2-0x0000000000620000-0x0000000000626000-memory.dmp

Filesize
24KB

Download
memory/1052-3-0x0000000074BC0000-0x00000000752AE000-memory.dmp

Filesize
6.9MB

Download
memory/1052-4-0x0000000007F70000-0x0000000008274000-memory.dmp

Filesize
3.0MB

Download
memory/1052-5-0x0000000074BCE000-0x0000000074BCF000-memory.dmp

Filesize
4KB

Download
memory/1052-6-0x0000000074BC0000-0x00000000752AE000-memory.dmp

Filesize
6.9MB

Download