9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 00:51

Target

9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe
Size

160KB
MD5

6082dcc46206f550e4607e7b5213e540
SHA1

73d5f561db25b8528f3721dbf5b159d37b257f2a
SHA256

9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11
SHA512

dfa2f3c9662609ccd271163b8a761b92fef379367aa6f1c01f0f4b41cb78f741b0bf006f1a9d8bc25104a877b4f1451ea337922152c416998abc382dfcab9f59
SSDEEP

1536:aO/xotmP4PMThHqXmFrJn3qoPbjVH3EYl0uASY+A37feaCMJDmYsLIb4PvYqHB/d:N/StmP4ETxqX0F3BASDADeak7dJHB/AI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1852	2036	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1852	2036	9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe	28
PID 2036 wrote to memory of 1852	2036	9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe	28
PID 2036 wrote to memory of 1852	2036	9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe	28
PID 2036 wrote to memory of 1852	2036	9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe	28

C:\Users\Admin\AppData\Local\Temp\9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe
"C:\Users\Admin\AppData\Local\Temp\9eea0210c0af09ff25039ac8a6a9417fbe7eb8d44a7a73a71df6e5e277a34c11.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 144
  2⤵
  - Program crash
  PID:1852

memory/2036-55-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download