ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e

Analysis

max time kernel
64s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 18:39

Target

ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe
Size

435KB
MD5

31d65d2052006666f6f8ddcc3525c865
SHA1

602bbcca1dd9fcb6f06ebc84dccf09e1d9541edd
SHA256

ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e
SHA512

bab393889a9d33f0cc23d8cbee60186037fe7109183454ef81f5b5505bbad28e8056041c8ee11c0f72021af11b4952c553cdc167a4f125ba6e7e4cdff2c750cf
SSDEEP

6144:JoSvCC22vdtH3Qd3t356qHyp3B3vYfkZuop0IHo47kGUOwf+SMTRl6Eg:aSvCSdtgt693wkUojI471Sf+SURi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
936	1992	WerFault.exe	25

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 936	1992	ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe	26
PID 1992 wrote to memory of 936	1992	ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe	26
PID 1992 wrote to memory of 936	1992	ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe	26
PID 1992 wrote to memory of 936	1992	ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe	26

C:\Users\Admin\AppData\Local\Temp\ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe
"C:\Users\Admin\AppData\Local\Temp\ccf85c774ee26c5626435b77ab7a7edac03e09150e64f3b12c470bc89f0ce92e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 288
  2⤵
  - Program crash
  PID:936

memory/936-56-0x0000000000000000-mapping.dmp

Download
memory/1992-54-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download
memory/1992-55-0x0000000000400000-0x0000000000473000-memory.dmp

Filesize
460KB

Download