cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652

Analysis

max time kernel
3s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/12/2022, 06:04

Target

cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe
Size

199KB
MD5

1e0bd838aaff0c5a8612d1157bdf9f4c
SHA1

bd994b0aa42fe593d34e7db143701fdaacca5313
SHA256

cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652
SHA512

4de1ec5f548925a861fddcbd2d78630820e2e813052b307ae47ef84c049b8a102c7d9bbb3d54acb652c32bc68484c785b32b43ef24cdb43a54ac97e945bf95c4
SSDEEP

3072:Uy0tSNGD1UIL9ylST64NtR/TmwUyg/AyJ3auGO/XeUasJaXjVHUrIpcun1kr:UyrGKEsST62Hh8Dx0njlk4cu+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1972	996	WerFault.exe	15

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 996 wrote to memory of 1972	996	cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe	28
PID 996 wrote to memory of 1972	996	cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe	28
PID 996 wrote to memory of 1972	996	cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe	28
PID 996 wrote to memory of 1972	996	cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe	28

C:\Users\Admin\AppData\Local\Temp\cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe
"C:\Users\Admin\AppData\Local\Temp\cb340fff13a4f5326eedab95ff2904682b080cf7ce77785581c313c9fb078652.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:996
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 996 -s 172
  2⤵
  - Program crash
  PID:1972