58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2

Analysis

max time kernel
30s
max time network
39s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 01:13

Target

58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe
Size

28KB
MD5

90e3dc650ea306c03479df66317ba44e
SHA1

2887a800fc4e87807f054d1482e618fee41cded7
SHA256

58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2
SHA512

0896bb277eabfd7973a6ab331887ab6856453456e233cc839b14783e5f5ae212eb7cd75a49296666532490eedf4c0dc7627117b3cd71c53686273abd51004a9e
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1P:hUjKVjl9xw3x6nz7vj1wrh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
956	1488	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1488 wrote to memory of 956	1488	58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe	27
PID 1488 wrote to memory of 956	1488	58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe	27
PID 1488 wrote to memory of 956	1488	58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe	27
PID 1488 wrote to memory of 956	1488	58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe	27

C:\Users\Admin\AppData\Local\Temp\58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe
"C:\Users\Admin\AppData\Local\Temp\58cdae26545a3996146890a5c8558cd1c57e5296ddfd3858858f4328b7a3bea2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1488
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1488 -s 120
  2⤵
  - Program crash
  PID:956

memory/1488-54-0x0000000075AD1000-0x0000000075AD3000-memory.dmp

Filesize
8KB

Download
memory/1488-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-56-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download