54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26-06-2024 01:10

Target

54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe
Size

6.8MB
MD5

004c0740a67086732a57448f04416e00
SHA1

be1c71a5d7dc5049660853a26bac5b4fd110c606
SHA256

54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9
SHA512

4648cb0e3133a7670dbed4e743fa3abc7c2e4b1058be13f7ec3d2e64a03485908ee83f2238392840cb908396f79acd6d1c0211a1ee4b4df2d512dfb730958279
SSDEEP

196608:oECqhjbzTHGVisAb93Ne/VtCKb02zkeSqM/:y2nbOfxzbSq

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2696	2232	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2696	2232	54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe	28
PID 2232 wrote to memory of 2696	2232	54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe	28
PID 2232 wrote to memory of 2696	2232	54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe	28
PID 2232 wrote to memory of 2696	2232	54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe	28

C:\Users\Admin\AppData\Local\Temp\54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe
"C:\Users\Admin\AppData\Local\Temp\54efd3af6cb3f09e109c35fd5505fd42da7de8f228bf73823edfc774db8c2cd9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 620
  2⤵
  - Program crash
  PID:2696

memory/2232-0-0x0000000073F1E000-0x0000000073F1F000-memory.dmp

Filesize
4KB

Download
memory/2232-1-0x00000000010C0000-0x0000000001794000-memory.dmp

Filesize
6.8MB

Download
memory/2232-2-0x0000000008400000-0x0000000008A4C000-memory.dmp

Filesize
6.3MB

Download
memory/2232-3-0x0000000000AE0000-0x0000000000B6E000-memory.dmp

Filesize
568KB

Download
memory/2232-4-0x0000000073F10000-0x00000000745FE000-memory.dmp

Filesize
6.9MB

Download
memory/2232-5-0x00000000061B0000-0x000000000668E000-memory.dmp

Filesize
4.9MB

Download
memory/2232-6-0x0000000073F1E000-0x0000000073F1F000-memory.dmp

Filesize
4KB

Download
memory/2232-7-0x0000000073F10000-0x00000000745FE000-memory.dmp

Filesize
6.9MB

Download