572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb

Analysis

max time kernel
55s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 23:42

Target

572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe
Size

227KB
MD5

60ab08d07a7d5bf5b8667695b5353507
SHA1

edb869645071864a0d8518b9bfae2e61a4220e99
SHA256

572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb
SHA512

67464005929a08de7b2f054f1a6489fec94220b04814ba0f302b32ff5773b5a69745728f871df5aa63dad45a6910d872f2bc8e29e604ecb308bd72be9a6329c0
SSDEEP

1536:3+uOCKy4wGBhQBY7NWee7COfMWrWy1FZTVfDyo7RUQj4TfLKo3QPpLHJG3:uu33GfQBY7NWeCNrWyXys1kTuouHQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
852	556	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 852	556	572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe	28
PID 556 wrote to memory of 852	556	572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe	28
PID 556 wrote to memory of 852	556	572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe	28
PID 556 wrote to memory of 852	556	572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe	28

C:\Users\Admin\AppData\Local\Temp\572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe
"C:\Users\Admin\AppData\Local\Temp\572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 88
  2⤵
  - Program crash
  PID:852