c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60

Analysis

max time kernel
2s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 19:03

Target

c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe
Size

25KB
MD5

4443955ea4584abc0d60c34e53f44b27
SHA1

bc46f2bbc7b1b983851d14f2bd240ad9717fadd6
SHA256

c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60
SHA512

8ff0117a3ea2bb08a25e6f51dd7b7c4e8b0e85c00b4e32370fc487708a804a9af29510f89c2de2026009bf26cd799e88ecfb83a40d0b0dc6a9a766a1ab34673b
SSDEEP

384:irXcCS4RI7nHhhWEAd2ouJNYFYPIN/qHMEU8gWmmW8602klMUhoi8T9cBWrkM:OcC5R8nSEC2BEYPIMHKPU0CoiO9c4kM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

972 1104 WerFault.exe c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe

pid	pid_target	process	target process
972	1104	WerFault.exe	c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe

description	pid	process	target process
PID 1104 wrote to memory of 972	1104	c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe	WerFault.exe
PID 1104 wrote to memory of 972	1104	c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe	WerFault.exe
PID 1104 wrote to memory of 972	1104	c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe	WerFault.exe
PID 1104 wrote to memory of 972	1104	c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe
"C:\Users\Admin\AppData\Local\Temp\c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 136
2⤵
- Program crash
PID:972