5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211

Analysis

max time kernel
10s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 18:36

Target

5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe
Size

388KB
MD5

07470a6c6abedb24127b6ad18643a0cf
SHA1

4006a025e8bfa2a8e19d225b7bb21c2afe1da350
SHA256

5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211
SHA512

b4d572e9c550f0034ba7c0b7f8e1e9ba515083de3f8034b8829b71d66ebe5bef0330d2cf22a1eb799d112e21dfc468fbaeff8aea0e8b080a6290fe47081a9bb0
SSDEEP

3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwI3U+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwI3U

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1496	1996	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1496	1996	5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe	28
PID 1996 wrote to memory of 1496	1996	5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe	28
PID 1996 wrote to memory of 1496	1996	5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe	28
PID 1996 wrote to memory of 1496	1996	5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe	28

C:\Users\Admin\AppData\Local\Temp\5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe
"C:\Users\Admin\AppData\Local\Temp\5384908f7c2e49e9bb862454396867ece3772f009bb9ccbf40d698b0efa93211.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 100
  2⤵
  - Program crash
  PID:1496