7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99

Analysis

max time kernel
24s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 14:56

Target

7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe
Size

72KB
MD5

44154c081d16a85f56623e85a2f36625
SHA1

47c3e8d8770c3afdeec56a4db45c272dec9b2015
SHA256

7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99
SHA512

5c2de9c41c4804f9ac53ce01982b85e730a1fdb961e1ca683b9d13f08ef0046dd5f4c4abb917233270c58f52788102dd22f0e5d461460d0e0438f80d0fb4ef40
SSDEEP

1536:Uu+hjRou5tGEK9cuYtWhiuRxYnc8O+jnLik4:Uu+WhiuRxYcsnr4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
768	916	WerFault.exe	12

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
916	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 916 wrote to memory of 768	916	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe	28
PID 916 wrote to memory of 768	916	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe	28
PID 916 wrote to memory of 768	916	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe	28
PID 916 wrote to memory of 768	916	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe	28

C:\Users\Admin\AppData\Local\Temp\7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe
"C:\Users\Admin\AppData\Local\Temp\7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:916
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 916 -s 244
  2⤵
  - Program crash
  PID:768