ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 15:58

Target

ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe
Size

370KB
MD5

60442e43c804efcb0bfbda8ba211926e
SHA1

792420143959fd18f1f863e05985c6c174052ebe
SHA256

ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93
SHA512

7966266585b27fa347f68a06eb88120dd50e2f595f9d981af157df32580a71fb9caad95da047650a5b3e70160e16c2f431d1e62e86b16aa768b8f320b054338f
SSDEEP

6144:lWqzEIs40CEQDS/nDHAZ7t1Sg7l7RLJCKsZuSfgz2gg4CfesYXUkoJOiYKA:lLzhs40QEMB/SghwumoCfesItkFZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2044	1932	WerFault.exe	17

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27
PID 1932 wrote to memory of 2044	1932	ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe	27

C:\Users\Admin\AppData\Local\Temp\ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe
"C:\Users\Admin\AppData\Local\Temp\ef5622efcab885032aa39bdbec40dccee333e1d7b3da9e2bbf49698efe526f93.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 256
  2⤵
  - Program crash
  PID:2044

memory/1932-54-0x0000000075131000-0x0000000075133000-memory.dmp

Filesize
8KB

Download