9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23

Analysis

max time kernel
3s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 15:31

Target

9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe
Size

46KB
MD5

89f6882ae067096896d89234a1765791
SHA1

24bed74c1fd69193e5112510e52fd15e2b047573
SHA256

9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23
SHA512

779dcc3563351f451d7ef2d3e39ef7302e5a65e692e80029a747a99fb70cf79c3838e4d02ccced185131d3f557b5c5b5bae6cd2f814790d460268c79a438a2be
SSDEEP

768:EuBqRcNJvszoYwdThg/4z/sDnvqf8wGqbe/QSXLlHNF0eLct7Ex4ktFjkUHI2wY:PBqRcNJvsSlYDnhwGJ7lkeLc9ujjkUom

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1344	940	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 940 wrote to memory of 1344	940	9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe	28
PID 940 wrote to memory of 1344	940	9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe	28
PID 940 wrote to memory of 1344	940	9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe	28
PID 940 wrote to memory of 1344	940	9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe	28

C:\Users\Admin\AppData\Local\Temp\9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe
"C:\Users\Admin\AppData\Local\Temp\9c6c25fe029ddb99539fdd55092442d09893e0495e2d0cd356efe18051305f23.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 940 -s 128
  2⤵
  - Program crash
  PID:1344