ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 13:01

Target

ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe
Size

123KB
MD5

45fa890ec28b907fd54a8e77ecf9ac92
SHA1

b1ecd3406485a83d98cc1640a62e7fd109fd398b
SHA256

ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256
SHA512

187e16ce8400c7f19e5428f6ceacc9e20151ed9c223fd79c9335852128d3bd656f017b89f410c0bd632579cb28dc9e7ba40e9bb5ffbeefdc4d99ae6537221fe9
SSDEEP

3072:YOhBdOZ/ZZEdTn7S4AiKWFfICaVenyC8v4K1glJ4+AqrD72L:nTi/ZZEd3SliKWFw1VB4K105b6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1584	1544	WerFault.exe	25

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 1584	1544	ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe	26
PID 1544 wrote to memory of 1584	1544	ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe	26
PID 1544 wrote to memory of 1584	1544	ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe	26
PID 1544 wrote to memory of 1584	1544	ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe	26

C:\Users\Admin\AppData\Local\Temp\ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe
"C:\Users\Admin\AppData\Local\Temp\ee405593f5a65c06d1521db0d30af03cbee1283566505ca241743cc18fe5c256.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1544 -s 44
  2⤵
  - Program crash
  PID:1584