f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b

Analysis

max time kernel
52s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04-12-2022 12:02

Target

f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe
Size

19KB
MD5

1f19196dfbe63e2be283f01635a0fd57
SHA1

cd92e95588016b1528986d64256c57a88e466d85
SHA256

f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b
SHA512

f01bf9c64997ea84a9c34a3c51d8d0b6db9a247aff9b0102ae82ce140161f1f3f28b7a32690d77aaf3a491256d3a8232abb44ae6637abf47a5a4e4941e4e1f0f
SSDEEP

384:3RryY7AodTouizzYtUq+C/nu4KDo/n6cjkaiz4ldzBiivPR8DuT:BryY7Aox36zI7vu4Ky6Skajl/iivPR8c

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1796	1776	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1776 wrote to memory of 1796	1776	f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe	27
PID 1776 wrote to memory of 1796	1776	f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe	27
PID 1776 wrote to memory of 1796	1776	f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe	27
PID 1776 wrote to memory of 1796	1776	f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe	27

C:\Users\Admin\AppData\Local\Temp\f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe
"C:\Users\Admin\AppData\Local\Temp\f7410059466f2afa295376a4efaddb8f69ca3f726c0bd0f99cf86bbf7290cc0b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1776 -s 36
  2⤵
  - Program crash
  PID:1796

memory/1776-54-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/1796-55-0x0000000000000000-mapping.dmp

Download