2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 17:02

Target

2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe
Size

477KB
MD5

43a64d4cb08be21b73d742ed1943e9f0
SHA1

a8d82fe9ded5f6362fb6a68655c18148a0f92afc
SHA256

2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f
SHA512

90804842ac11397f5e8f052030d1077e797348a1695357330d09e270729e9ec4ba4733be78760186b646043696f46de035d8332d822071e244f700f03a77783a
SSDEEP

12288:NM1KYiul8q6KoRqfnZ6CJXzFcZ6A1onC1tNIt:N/tM8BRRqh6mFcZR1onivIt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1944 1708 WerFault.exe 2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe

pid	pid_target	process	target process
1944	1708	WerFault.exe	2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe

description	pid	process	target process
PID 1708 wrote to memory of 1944	1708	2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe	WerFault.exe
PID 1708 wrote to memory of 1944	1708	2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe	WerFault.exe
PID 1708 wrote to memory of 1944	1708	2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe	WerFault.exe
PID 1708 wrote to memory of 1944	1708	2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe
"C:\Users\Admin\AppData\Local\Temp\2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1708 -s 88
2⤵
- Program crash
PID:1944