28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 05:01

Target

28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe
Size

500KB
MD5

2680c845a9f3a2eab004a037bf3e7191
SHA1

a9045b3d8b014cefb850c7907b4c7b70bc14073e
SHA256

28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6
SHA512

577874d44b993101fbc610c29ea7bb721a0fb8365ef655f1af7293abacb91e7c96468b735e90a554652effbfa3efdd90044bfcb224ca479bc5b99c5978d69b2f
SSDEEP

12288:3astXNA2Q3XiSuqcKmQIiVM73K3Kd83ZGpWjtVMdNGdgoebw:3zXG2Q3SSuqcKmQIiy7K3/QgVS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1244 2360 WerFault.exe 28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe

pid	pid_target	process	target process
1244	2360	WerFault.exe	28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe

description	pid	process	target process
PID 2360 wrote to memory of 1244	2360	28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe	WerFault.exe
PID 2360 wrote to memory of 1244	2360	28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe	WerFault.exe
PID 2360 wrote to memory of 1244	2360	28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe	WerFault.exe
PID 2360 wrote to memory of 1244	2360	28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe
"C:\Users\Admin\AppData\Local\Temp\28975ef9b92ab6bfa806d8f9bcae79126b16eb4f94410134ca2a6fa419814ca6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 96
2⤵
- Program crash
PID:1244

memory/2360-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download