c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69

Analysis

max time kernel
34s
max time network
36s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03-12-2022 05:46

Target

c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe
Size

99KB
MD5

5c246c9d8ff312468d7debcb03855d18
SHA1

93afae4fe41512d9d90625dd67ae3f78724534e4
SHA256

c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69
SHA512

3d96b8b33fb6add8714c25cf6193954d0a2b625e65186019dbbf103a383d50a285fda78e356bd21eb5ff11bd2d81b4d072032328f336f68d7bdac2904fba4143
SSDEEP

3072:EPztZG+++++++++++++++++++++++++++++++++++++++++UeiwAe:EPpZG++++++++++++++++++++++++++G

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

664 1528 WerFault.exe c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe

pid	pid_target	process	target process
664	1528	WerFault.exe	c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe

description	pid	process	target process
PID 1528 wrote to memory of 664	1528	c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe	WerFault.exe
PID 1528 wrote to memory of 664	1528	c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe	WerFault.exe
PID 1528 wrote to memory of 664	1528	c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe	WerFault.exe
PID 1528 wrote to memory of 664	1528	c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe
"C:\Users\Admin\AppData\Local\Temp\c207fac436aa72581cd0de4dba42a1b9ee038141b13065ed4381d14751496e69.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 612
2⤵
- Program crash
PID:664

memory/664-55-0x0000000000000000-mapping.dmp

Download
memory/1528-54-0x00000000757B1000-0x00000000757B3000-memory.dmp

Filesize
8KB

Download