7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5

Analysis

max time kernel
27s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 19:53

Target

7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe
Size

76KB
MD5

00fd9f11890cfb2cd8980654dfe24426
SHA1

7a86272dbfaca39fe52bfe0357f13d3e1c0efb73
SHA256

7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5
SHA512

6fc643aa1152305d95a660cc1295e087fdc4053cdbd7cebf397924e0f8b717d43c305f7e40608edaf391ad3e68d41c09022202d9907ca8fa7c8764e248baa93c
SSDEEP

1536:nTGJDVB7e9fzKBNJIDfk+7s4do1u2wwIEjEErxTWDTMqhGKYIZTET8x:I4GBMDfk+7syt2wwIEjBkMqhGKZTbx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
480	1992	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 480	1992	7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe	28
PID 1992 wrote to memory of 480	1992	7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe	28
PID 1992 wrote to memory of 480	1992	7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe	28
PID 1992 wrote to memory of 480	1992	7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe	28

C:\Users\Admin\AppData\Local\Temp\7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe
"C:\Users\Admin\AppData\Local\Temp\7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 36
  2⤵
  - Program crash
  PID:480

memory/1992-55-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download