ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71

Analysis

max time kernel
13s
max time network
50s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 06:22

Target

ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe
Size

421KB
MD5

c71e0659ec107f5b126b7972da655057
SHA1

0a26b1188b03947de9ee02aa4fbc4f8272f8847e
SHA256

ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71
SHA512

b99d0ee35659e8671ae654afead0301de7c0bf990396d7e562950fa2fa50244fa54dbc4aec197f0d4bf043d919f170e810e5a27fe530ae50c8fdd9ab490eea62
SSDEEP

12288:3UmA3F/Y+Vq+RpV0N8PQfMT3MLoJXul0s2YCk:EmA3JYcVEBfdLKulrz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1736	1988	WerFault.exe	6

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 1736	1988	ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe	28
PID 1988 wrote to memory of 1736	1988	ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe	28
PID 1988 wrote to memory of 1736	1988	ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe	28
PID 1988 wrote to memory of 1736	1988	ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe	28

C:\Users\Admin\AppData\Local\Temp\ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe
"C:\Users\Admin\AppData\Local\Temp\ca3bc3c7850a83fc7913509468202caf285b801cbf39305b4f48ac196c922d71.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1988 -s 192
  2⤵
  - Program crash
  PID:1736

memory/1988-54-0x0000000075281000-0x0000000075283000-memory.dmp

Filesize
8KB

Download
memory/1988-56-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download
memory/1988-55-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download
memory/1988-57-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download
memory/1988-59-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download