b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa

Analysis

max time kernel
55s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 09:07

Target

b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe
Size

28KB
MD5

cc40c4d6722b82c0c935a31caad5aa57
SHA1

de6c16d3b5ee4ecfb4483dbf35084b62996d6d99
SHA256

b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa
SHA512

24ddfc4115ead00eddcd65fd507fe0d80faa08d1be7648827c00481d927be0fe3e45038bf128de1f6efb5692d9f1568302a0cd0a87966171be2ec478c25ada3e
SSDEEP

384:udciobH4JwqLmI8orPA0PvxeEoxec5xsA93gineBWt9vvA5ywOt:YBobHWwq1lc0HPsV93gCeBY9vvAwwOt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1512 760 WerFault.exe b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe

pid	pid_target	process	target process
1512	760	WerFault.exe	b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe

description	pid	process	target process
PID 760 wrote to memory of 1512	760	b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe	WerFault.exe
PID 760 wrote to memory of 1512	760	b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe	WerFault.exe
PID 760 wrote to memory of 1512	760	b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe	WerFault.exe
PID 760 wrote to memory of 1512	760	b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe
"C:\Users\Admin\AppData\Local\Temp\b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 760 -s 92
2⤵
- Program crash
PID:1512