60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 23:58

Target

60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe
Size

76KB
MD5

6fc904b530cd5f0bef417b28324295a0
SHA1

084eedf49133475d4ab0d27b1f2db679b5612f30
SHA256

60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b
SHA512

bed15fdf9a2329ce6d2ca3ed5d7ca53111a4dd9cec8b1f63aa5bc73bbe1f3c61f901adb1106e58106c69ca4a80447280ee5a6352a74d23ee6c2ee70268b5c607
SSDEEP

1536:BSdg4ouc0loZlxoXBWzVsUINe+XhVysR7jEErxTWDTMqhGKYIZTET8x:w5cFlnzaUI4+x3jBkMqhGKZTbx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
904	1528	WerFault.exe	13

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 904	1528	60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe	27
PID 1528 wrote to memory of 904	1528	60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe	27
PID 1528 wrote to memory of 904	1528	60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe	27
PID 1528 wrote to memory of 904	1528	60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe	27

C:\Users\Admin\AppData\Local\Temp\60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe
"C:\Users\Admin\AppData\Local\Temp\60c8c15dba80d062e1e627c2c72cde9963c4f9142c074702c0b9d1afe1bf126b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 36
  2⤵
  - Program crash
  PID:904

memory/1528-55-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download