fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5

Analysis

max time kernel
43s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
13-10-2022 01:45

Target

fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe
Size

294KB
MD5

16e8f1670668384884715f4efbbbebd1
SHA1

3f8bc0ef848ecebf1f6c24c47fcf8d225de20b60
SHA256

fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5
SHA512

72d25a5ebef7353fa7f9f62e4d58dfbaa9e248e0a6e035dd1455e174c7be0a79692d30e3a81d01ea80c4271aa77052ee83a032f46843285f02f95cf27f761b41
SSDEEP

3072:JOC+EnCeqk1oPh1MZf8EQ1DyWgi/ysf0eC:EYN9oJ1MZ0JGW5rfs

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1312 1716 WerFault.exe fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe

pid	pid_target	process	target process
1312	1716	WerFault.exe	fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe

description	pid	process	target process
PID 1716 wrote to memory of 1312	1716	fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe	WerFault.exe
PID 1716 wrote to memory of 1312	1716	fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe	WerFault.exe
PID 1716 wrote to memory of 1312	1716	fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe	WerFault.exe
PID 1716 wrote to memory of 1312	1716	fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe
"C:\Users\Admin\AppData\Local\Temp\fce7f27c7e2b58c267207aaf13c3a115f34487fd551aced03f85e2977c0932c5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1716

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 96
2⤵
- Program crash
PID:1312