7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2

Analysis

max time kernel
32s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/10/2022, 23:41

Target

7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe
Size

452KB
MD5

6374e11b6e7237615b016c0de6116780
SHA1

56d9e84ea663165e1d8c1c4976cdd7d5c26fbb20
SHA256

7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2
SHA512

e829acd19de057940bedd9913fce0d0b79b84b749e0ac04e76d9d899617cfd15b6dde1dce53f0ade745f7df8831aa273fd9813a15d6cd60c5a7f69dc61ab5725
SSDEEP

12288:MYU476vtic2xSNc8DtoQRWIvf5qZ4KAlPfEOX:Hutj22c8RVWFZ3ARsOX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1912	1996	WerFault.exe	22

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1996	7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1912	1996	7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe	28
PID 1996 wrote to memory of 1912	1996	7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe	28
PID 1996 wrote to memory of 1912	1996	7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe	28
PID 1996 wrote to memory of 1912	1996	7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe	28

C:\Users\Admin\AppData\Local\Temp\7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe
"C:\Users\Admin\AppData\Local\Temp\7b4c663cc6782866e097b8415771b2fe46fd2f86ab3089296ddb6bed4fa418c2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 188
  2⤵
  - Program crash
  PID:1912