d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7

Analysis

max time kernel
38s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 13:54

Target

d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe
Size

47KB
MD5

a0640efa971e5c2a65cb086ccae0c630
SHA1

39b4f9c6166aebec0c4cb4847b15eadb9b7aeebb
SHA256

d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7
SHA512

38748001de6c51a4a4b623beb54534191d34081bb868fa10120b756c5e52144d52f2a5031b58e9bae80e2c4e95a5dbb6f962b007e0d6c6914395740358626e7f
SSDEEP

768:0ORCDt6TrOIRRqbG3xW7qu6gP2JnC03mdvvvvXv6NvBoUhR+C7SujMx4QvNaO:TC6Tn3xFs2yvno5FRUujMxNvo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1952	1976	WerFault.exe	25

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1976	d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1976 wrote to memory of 1952	1976	d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe	27
PID 1976 wrote to memory of 1952	1976	d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe	27
PID 1976 wrote to memory of 1952	1976	d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe	27
PID 1976 wrote to memory of 1952	1976	d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe	27

C:\Users\Admin\AppData\Local\Temp\d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe
"C:\Users\Admin\AppData\Local\Temp\d4a7f2fde1ba47c342f348cf2ef9951f28646ca8b99bcf2fc73f6711696aabb7.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1976 -s 124
  2⤵
  - Program crash
  PID:1952

memory/1952-54-0x0000000000000000-mapping.dmp

Download
memory/1976-55-0x0000000000020000-0x0000000000026000-memory.dmp

Filesize
24KB

Download