cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7

Analysis

max time kernel
37s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29-10-2022 03:05

Target

cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe
Size

58KB
MD5

5cad60cb76b696f702461fe56db3ca1b
SHA1

01b13f41ee2bcd6ed008765266c6cf2baa81a270
SHA256

cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7
SHA512

826df3e940ad475520250af09b1b51411d8cc065130215b6b7a44e55a1b8bb46e27c114e57d05b02492c37f8db56151a6bf15e835a2bc24b3a6c9f378159d133
SSDEEP

1536:kZ8/1BIMD5M/RguiBiUm7RRflSCuAP4hwcZ8E:9BIMD+ZguiBU7hcC4hRN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	916	WerFault.exe	8

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 916 wrote to memory of 1740	916	cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe	16
PID 916 wrote to memory of 1740	916	cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe	16
PID 916 wrote to memory of 1740	916	cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe	16
PID 916 wrote to memory of 1740	916	cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe	16

C:\Users\Admin\AppData\Local\Temp\cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe
"C:\Users\Admin\AppData\Local\Temp\cac5801fc03eb4b44336b86e85e857c884ce8e10a26a996baea43b7cd5ad93b7.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:916
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 916 -s 36
  2⤵
  - Program crash
  PID:1740

memory/916-55-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1740-54-0x0000000000000000-mapping.dmp

Download