c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 16:11

Target

c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe
Size

25KB
MD5

4a32316ee95809b70855b760188896a2
SHA1

283c9fb0b15ea0e50f984bd949dd4675db911e74
SHA256

c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005
SHA512

d69c0f7ab21ad8af867eaa8f455b0f1093ce72db102ce5d1c7a4f79309f3757878569a63959c0ef8b7a8fb49c3f9d23aafc626e9bad9a1db175ec4d5b7038fd6
SSDEEP

384:VBFfzhXJJ3Qd4Lta43+Jddr8dJ0x9CAoikpYh2dCobZpBb:1fzhXUdW/3f7vikpYepBb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1988	1048	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 1988	1048	c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe	27
PID 1048 wrote to memory of 1988	1048	c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe	27
PID 1048 wrote to memory of 1988	1048	c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe	27
PID 1048 wrote to memory of 1988	1048	c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe	27

C:\Users\Admin\AppData\Local\Temp\c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe
"C:\Users\Admin\AppData\Local\Temp\c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1048 -s 136
  2⤵
  - Program crash
  PID:1988

memory/1048-54-0x0000000076171000-0x0000000076173000-memory.dmp

Filesize
8KB

Download