ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759

Analysis

max time kernel
9s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 21:30

Target

ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe
Size

76KB
MD5

850130ca3b04ea36b23ee3ae97d64d30
SHA1

cc8ec263d0fac59c3d740591ddfe0949394af057
SHA256

ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759
SHA512

3fdb3304271f35b94db74b3c0a778d7b673fec0f4eb33441e14c39823633c2141348113e3336a78e4725360fd88eab1efa53a8a93b2d5973e9bcc62c55947346
SSDEEP

1536:mmHUH2XVXt3gxUyu13m2Pc1MNpjVrs2ryrd1vUQuq6:XVXt3gxUb3PcyNHs2qo

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1756	904	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 1756	904	ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe	28
PID 904 wrote to memory of 1756	904	ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe	28
PID 904 wrote to memory of 1756	904	ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe	28
PID 904 wrote to memory of 1756	904	ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe	28

C:\Users\Admin\AppData\Local\Temp\ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe
"C:\Users\Admin\AppData\Local\Temp\ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:904
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 904 -s 36
  2⤵
  - Program crash
  PID:1756

memory/904-55-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download