58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5

Analysis

max time kernel
16s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 04:20

Target

58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe
Size

42KB
MD5

09433c1aa91ded04d097effc6c99f4f0
SHA1

12b81e4b4a5c0c9dae3afc7f072b9caaff926db6
SHA256

58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5
SHA512

83cac88c43ce1c80cc43aff4f551378ba4de69d9e4dba4c050ccbb9b9065b3044559cd53e69e0769e1c1cf22e2f18c9b6319a562f0b66ab60061b8d3c4f00d89
SSDEEP

384:5iYhcdUaA4jJqb1HEAWJv2flFXlMLxHrih7AM8kranqjvYC9k+vbO6k1H21OK/V:lhj4j8b1HEhkBqxHdMGqv9kWbrkNSN/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
308	908	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 908 wrote to memory of 308	908	58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe	28
PID 908 wrote to memory of 308	908	58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe	28
PID 908 wrote to memory of 308	908	58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe	28
PID 908 wrote to memory of 308	908	58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe	28

C:\Users\Admin\AppData\Local\Temp\58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe
"C:\Users\Admin\AppData\Local\Temp\58b4dd39049d1dc921ebefb097111ef8ae3c4df209e22a3b8c2093bd33a2fef5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:908
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 908 -s 36
  2⤵
  - Program crash
  PID:308