f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e

Analysis

max time kernel
35s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 09:07

Target

f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe
Size

28KB
MD5

91e506ced39f9fcd7b5f2a65530ca6f6
SHA1

57b102fb95ae09230a32f772a5dc1ee2f8e5c5dd
SHA256

f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e
SHA512

e4b2df3849651c2f284521cdf2dfb2e7638751078eabade1cdd05a4c6ab5fea272dd098eaaec21d702dc95854fd4f70bd0744de23a5585aad8b73f25523de8f6
SSDEEP

384:udciobH4JwqLmI8orPA0PvxeEoxec5xsA93gineBWt9vvA54YOt:YBobHWwq1lc0HPsV93gCeBY9vvAXOt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

788 1612 WerFault.exe f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe

pid	pid_target	process	target process
788	1612	WerFault.exe	f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe

description	pid	process	target process
PID 1612 wrote to memory of 788	1612	f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe	WerFault.exe
PID 1612 wrote to memory of 788	1612	f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe	WerFault.exe
PID 1612 wrote to memory of 788	1612	f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe	WerFault.exe
PID 1612 wrote to memory of 788	1612	f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe
"C:\Users\Admin\AppData\Local\Temp\f0de1528398fa9b72fc232ec4deb966261fcd353d8b901b9ef01753c00e1036e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1612 -s 92
2⤵
- Program crash
PID:788