3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8

Analysis

max time kernel
39s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 06:41

Target

3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe
Size

197KB
MD5

3b8de1c7b32e36ed8db4caec60b7d84b
SHA1

33fbbcf00a88948b1ce8c03651312d7f4b1f5f25
SHA256

3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8
SHA512

14aeed0b682c68448039f0d72f7961c82451d0740b061ebbeef4048ea0ed9277aa7b9e36b806fff7b288154fd96ad9e024673928cf7eb0c736e66834d1dd8307
SSDEEP

6144:m75UYiziSFM2OGhl61tqSFBXmrzDN5DCQnUYX5zH1bqB6WMM:kSrl6vhmfBra

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1412	1044	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1044 wrote to memory of 1412	1044	3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe	27
PID 1044 wrote to memory of 1412	1044	3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe	27
PID 1044 wrote to memory of 1412	1044	3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe	27
PID 1044 wrote to memory of 1412	1044	3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe	27

C:\Users\Admin\AppData\Local\Temp\3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe
"C:\Users\Admin\AppData\Local\Temp\3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1044
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1044 -s 100
  2⤵
  - Program crash
  PID:1412

memory/1044-55-0x0000000000400000-0x0000000000432440-memory.dmp

Filesize
201KB

Download