67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96

Analysis

max time kernel
31s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 16:45

Target

67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe
Size

56KB
MD5

0d8e34a7b47546715ebf31dd2c3eea7a
SHA1

0ea181b3b4257bcc1324a1cdf15bead86ff1aba8
SHA256

67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96
SHA512

e76e6f4baee33a23537d07b9f7483819357d7e483b06604ece050a08226bb37360e71a4eb61ce1cd46e964447f2905491ac0b35c8f1b8a9bd98506ef7f4ab5d0
SSDEEP

768:eY1rFXME+43i9qM+5vb9r/JpfuPPHaGRDtw:eYZJx+997qr/qaGRD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
968	1728	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1728 wrote to memory of 968	1728	67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe	28
PID 1728 wrote to memory of 968	1728	67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe	28
PID 1728 wrote to memory of 968	1728	67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe	28
PID 1728 wrote to memory of 968	1728	67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe	28

C:\Users\Admin\AppData\Local\Temp\67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe
"C:\Users\Admin\AppData\Local\Temp\67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 124
  2⤵
  - Program crash
  PID:968

memory/1728-55-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download