36a33e7da8ad27ce449d6bc53c6ca650bc283b8f96d5fe797187aea40e0dcc68

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 09:13

Target

7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe
Size

511KB
MD5

c3db92ad91d83ae759f9b62d1dc60690
SHA1

cba0187e53f0418353650dd711b8f29c59ee3740
SHA256

7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7
SHA512

fc4034f2ebfde839e0ded47af5da25feef5013a181801e51080ed2f99ae3634dc0dd1924829db258421bc5805e8bcf4141030aa1ad17fe7472c688ad63f10a76
SSDEEP

12288:G/w6V3Dq1uUpoLIIt0gSmmufejAdo1jQBAeZXoCe9:J6VzqHpafSmPGjMo1EB0R9

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2292 2232 WerFault.exe 7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe

pid	pid_target	process	target process
2292	2232	WerFault.exe	7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe

description	pid	process	target process
PID 2232 wrote to memory of 2292	2232	7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe	WerFault.exe
PID 2232 wrote to memory of 2292	2232	7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe	WerFault.exe
PID 2232 wrote to memory of 2292	2232	7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe	WerFault.exe
PID 2232 wrote to memory of 2292	2232	7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe
"C:\Users\Admin\AppData\Local\Temp\7a5164cea09551d97475639ab8fb782d5fff907df5db0ff94ae2cb2a3b40dcf7.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 48
2⤵
- Program crash
PID:2292

memory/2232-0-0x0000000000F3A000-0x0000000000F3B000-memory.dmp

Filesize
4KB

Download