0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5

Analysis

max time kernel
12s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
12-10-2022 03:20

Target

0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe
Size

63KB
MD5

ab12004530e77a411a600067ce37d341
SHA1

dffe8d4b6beefb90dc2ead6f68ad8ace30f654be
SHA256

0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5
SHA512

077b4d8ccdb7f265f0b6a6ae2cb71d8e5843e49fcca5f65d853fb1a97586e23b78fe1c127b35b196f9e98bb1b215f3c829b001493f0d0023436d1a5c1b3c8d0e
SSDEEP

768:9AulhLLUbfTpVPe4rCxeVtkZ0+WuiXVjcgIH3H3G+bZ91DB3cDq7scSrOR2/GLKj:9TLLUb9V2BIXkZ0+Wd0H37bL1V8qo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2024	976	WerFault.exe	26

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 976 wrote to memory of 2024	976	0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe	28
PID 976 wrote to memory of 2024	976	0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe	28
PID 976 wrote to memory of 2024	976	0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe	28

C:\Users\Admin\AppData\Local\Temp\0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe
"C:\Users\Admin\AppData\Local\Temp\0fd4af4cbcaa6d91856d3ea110c9b017944ead91022ca5d070bcc312c42e71f5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:976
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 976 -s 520
  2⤵
  - Program crash
  PID:2024

memory/976-54-0x00000000011D0000-0x00000000011E6000-memory.dmp

Filesize
88KB

Download