7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef

Analysis

max time kernel
42s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 00:27

Target

7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe
Size

320KB
MD5

09180b173ae438cdb23a12988d95cc40
SHA1

8b157563b32252347231100ad1829d186d9fe2dc
SHA256

7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef
SHA512

52eb4f45ae9e1be219093feae84c2ec598359fb0fe5038f5ff3a293f2d7c899d7e2842ea65dadc78cf3d6f61065fc38fd7d25730fc9f8acf0e51abbf05bef9c8
SSDEEP

6144:fue4SBr+H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:fv4Yk2EB0NxDIBuOFe7/uT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1824	1988	WerFault.exe	19

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 1824	1988	7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe	28
PID 1988 wrote to memory of 1824	1988	7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe	28
PID 1988 wrote to memory of 1824	1988	7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe	28
PID 1988 wrote to memory of 1824	1988	7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe	28

C:\Users\Admin\AppData\Local\Temp\7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe
"C:\Users\Admin\AppData\Local\Temp\7c2eed47ed75a92dca8c3c10b1a0e9f0f32f9e2e921edc8e71dac7b8942f2aef.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1988 -s 36
  2⤵
  - Program crash
  PID:1824

memory/1988-55-0x0000000000400000-0x0000000000462000-memory.dmp

Filesize
392KB

Download