78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f

Analysis

max time kernel
137s
max time network
39s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-12-2022 00:21

Target

78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe
Size

117KB
MD5

c60ca41d687a0b06622838a198221bce
SHA1

6fafa4624afe747507c77d3f3a043267df2179cc
SHA256

78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f
SHA512

843beb1732f588c0c90b7faba9913517b5c7330ba64dd8071a7a33639c1adb7b751823caa5e1b0d55b47ddaf616ff4cea9766685c8d78ee1d66c017aa01eb3e7
SSDEEP

1536:gzZZpp48Z30lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca2:eZQlI/HUOjSiToj7CEqfqg2

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
956	836	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 836 wrote to memory of 956	836	78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe	27
PID 836 wrote to memory of 956	836	78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe	27
PID 836 wrote to memory of 956	836	78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe	27
PID 836 wrote to memory of 956	836	78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe	27

C:\Users\Admin\AppData\Local\Temp\78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe
"C:\Users\Admin\AppData\Local\Temp\78380e48bc7cef707c04e47f8651a31f0d68723278d3993ef8d498ad5c9c8c7f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 836 -s 168
  2⤵
  - Program crash
  PID:956

memory/836-54-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/836-55-0x0000000075AD1000-0x0000000075AD3000-memory.dmp

Filesize
8KB

Download
memory/836-57-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download