e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
30-06-2024 14:25

Target

e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe
Size

2.9MB
MD5

490e1e2c51156303e8dcb5da19960e30
SHA1

240f9467766127a248adcaeb814ddc7cff461777
SHA256

e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8
SHA512

1f03f5abae55571a168476f2b21a8d14459ad47da5be340dd6d416f996b25f97fdfe6960d89cd1e0f048ba252249d4a836a690ae2a4c35b096b9c04a1eaca8cd
SSDEEP

49152:5esKAvZibeyiuftlobfTEBSUtGHjzUxSs/GS+1u:PKAAe/YtKbfTISYGDz6+E

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3056 2116 WerFault.exe e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe

pid	pid_target	process	target process
3056	2116	WerFault.exe	e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe

description	pid	process	target process
PID 2116 wrote to memory of 3056	2116	e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe	WerFault.exe
PID 2116 wrote to memory of 3056	2116	e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe	WerFault.exe
PID 2116 wrote to memory of 3056	2116	e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe	WerFault.exe
PID 2116 wrote to memory of 3056	2116	e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe
"C:\Users\Admin\AppData\Local\Temp\e00f66823f6f9382ea63aaf1069c851122a4890395a494b828822fefb00d5cc8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2116 -s 224
2⤵
- Program crash
PID:3056

memory/2116-0-0x0000000000400000-0x0000000000728000-memory.dmp

Filesize
3.2MB

Download
memory/2116-1-0x0000000000400000-0x0000000000728000-memory.dmp

Filesize
3.2MB

Download