8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d

Analysis

max time kernel
32s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 02:58

Target

8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe
Size

270KB
MD5

cac4aaa37c52e2b8c0ba9c7a75f430eb
SHA1

50093e92556f126f03c32d001537db5cdafd76da
SHA256

8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d
SHA512

5fa3bb3d46e8e01bf69636963102334ded215a66827b0358dd1d61b519bdc5920fcd0fa2e673de13a71f8977ceadf8190d65e65b91d4886ce6e6b22fb0edafaa
SSDEEP

3072:A1zBzP/fLdrKLT6aMXaaRZPC/bMjQBikVj0Yjk6iJKxdeB2jAO9Wru:kz9J2LT8XaoxZzejxk6iJKxdeB2Mru

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
908	1808	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 908	1808	8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe	28
PID 1808 wrote to memory of 908	1808	8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe	28
PID 1808 wrote to memory of 908	1808	8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe	28
PID 1808 wrote to memory of 908	1808	8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe	28

C:\Users\Admin\AppData\Local\Temp\8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe
"C:\Users\Admin\AppData\Local\Temp\8f911ae647f2a941a75c8790c48c406c4e3f726aace9a9b563cdd31b2a6a8b9d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1808 -s 36
  2⤵
  - Program crash
  PID:908