9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc

Analysis

max time kernel
40s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 14:45

Target

9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe
Size

229KB
MD5

16bb21b42c5e4400203d1d26363c51a9
SHA1

b818617b280a975643782370cb3f731c8ae8a1d5
SHA256

9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc
SHA512

6aacdfb210ec0c305f0e72dc695f63487ff44b331fac7f3ff3f4d461466aef690ef8e31b878f2b3d21f63668291811cd55e7dad88819dc83ee682a3f25a5f6da
SSDEEP

6144:v2vdSaziYVEOKRALIR01ZpT4fnZu9o11xYpov6p5:v217ziYVEOKR0pTqnQ9sxYpoSn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1008	1076	WerFault.exe	21

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1076 wrote to memory of 1008	1076	9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe	28
PID 1076 wrote to memory of 1008	1076	9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe	28
PID 1076 wrote to memory of 1008	1076	9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe	28
PID 1076 wrote to memory of 1008	1076	9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe	28

C:\Users\Admin\AppData\Local\Temp\9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe
"C:\Users\Admin\AppData\Local\Temp\9d69f7d535506b33a534abaa0b61cc482383ae30715308a419ff9ac972efbbbc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1076
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 104
  2⤵
  - Program crash
  PID:1008