a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9

Analysis

max time kernel
2s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
05-12-2022 10:12

Target

a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe
Size

63KB
MD5

be6a7e065f5d85fd530c2b3bebb09795
SHA1

692b509b57a26d0fd1ad554cb0b020a4cbdbc3de
SHA256

a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9
SHA512

bf15e67b2e9c7bf0e6f730858d6c59a8a3f4e624313e2dd1afe4c39204af9cbf4e5d9698b1b044f4c80e3b569f88e2f7a5c9b89664355bc72c17a8704e518846
SSDEEP

1536:8Jarcpz4fEiff71zDinnU61EBs4N7uCZ6a23kq4KeYJ5nL9jx:8IrcpzvW0rWBsM7zZN23WKea5L9jx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1684	956	WerFault.exe	24

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 1684	956	a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe	28
PID 956 wrote to memory of 1684	956	a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe	28
PID 956 wrote to memory of 1684	956	a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe	28
PID 956 wrote to memory of 1684	956	a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe	28

C:\Users\Admin\AppData\Local\Temp\a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe
"C:\Users\Admin\AppData\Local\Temp\a4572cbc87410a531e53aa38e3206cf3a09c73cd2478ce22d09f5ab2ff74b9e9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 956 -s 140
  2⤵
  - Program crash
  PID:1684

memory/956-54-0x0000000075B61000-0x0000000075B63000-memory.dmp

Filesize
8KB

Download