b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e

Analysis

max time kernel
33s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 05:18

Target

b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe
Size

260KB
MD5

8110fa529e737ec575ed912c35fb9fd3
SHA1

fb4182142701aa5e0f00e8401e2cdfa8bf6263c5
SHA256

b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e
SHA512

105a702cd477437660f65f9147b9b3bdc2502e0c466c2f811cf1a47d7e9e278ca93d9034d7a9c2881a8e2ed742d360b0dbd28d6088cba3715ab847e3e2b4afc4
SSDEEP

6144:mhuqcwAqOxLZ/rFSACAfzh8mWbT5PDgf6S9D5qKh/wBCn0zE:mXcwAHlZ/46yr0f3R5qKG20z

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1376	1916	WerFault.exe	23

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1916 wrote to memory of 1376	1916	b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe	28
PID 1916 wrote to memory of 1376	1916	b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe	28
PID 1916 wrote to memory of 1376	1916	b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe	28
PID 1916 wrote to memory of 1376	1916	b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe	28

C:\Users\Admin\AppData\Local\Temp\b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe
"C:\Users\Admin\AppData\Local\Temp\b4c8d680f90cd1f320286ee1f9cd9fca6d357bce568fb0e4d7508b918716ae1e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1916
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 100
  2⤵
  - Program crash
  PID:1376