bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4

Analysis

max time kernel
40s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 15:07

Target

bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe
Size

56KB
MD5

504e5980c6e29296b626e48ce56d5be8
SHA1

42fd7ad3b853331d525ac812921f1c71490e35a0
SHA256

bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4
SHA512

366ae87006a6d22f8241203b622704ab511c0e3cad0eabfe1e4dcfd9ff0c523a05ef775fb33bfa2f6e3dc6f31c51f92cacc1371d68ff216fc9194b4760f6de16
SSDEEP

1536:vjjjj1LTqVR0bx3jJv55GS4NnTj8pbXLGoDkjPiarVTN:vjjjjxA0bx3V783oWoDkjPi2TN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2040	1956	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1956 wrote to memory of 2040	1956	bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe	28
PID 1956 wrote to memory of 2040	1956	bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe	28
PID 1956 wrote to memory of 2040	1956	bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe	28
PID 1956 wrote to memory of 2040	1956	bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe	28

C:\Users\Admin\AppData\Local\Temp\bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe
"C:\Users\Admin\AppData\Local\Temp\bd7bcfe699f0699238bc44211b6b4e37c08fe6432a7ae75199194ec46b355aa4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 36
  2⤵
  - Program crash
  PID:2040