edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341

Analysis

max time kernel
3s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 13:46

Target

edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe
Size

29KB
MD5

6b4b78584ade9b64ef382c144c78e7b9
SHA1

6088abe6c779560905e5151f1f6f3d88c41c388b
SHA256

edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341
SHA512

4b8dec2bcf3392e0100ae2596a63df342de308d094da85df6299fcb287a371dd139e44a0a179866c4b15ef4e463e3a03b4693d39f1bfcfeecdb8a19535891e9f
SSDEEP

384:OBXGiYC6cWvscx5KQYWdKLAmsQXV3EtS6Amjmykv5EiAXciQCHsp9uON+4wWpG:2tWv9xcIdMATC0OOZk5OQCKuON+lWp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2020	1736	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 2020	1736	edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe	28
PID 1736 wrote to memory of 2020	1736	edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe	28
PID 1736 wrote to memory of 2020	1736	edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe	28
PID 1736 wrote to memory of 2020	1736	edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe	28

C:\Users\Admin\AppData\Local\Temp\edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe
"C:\Users\Admin\AppData\Local\Temp\edccf4fae99dfba5b67deb0699e906532ee7baca85dfa683a35bd39340906341.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1736 -s 88
  2⤵
  - Program crash
  PID:2020

memory/1736-55-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download