9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 02:23

Target

9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe
Size

90KB
MD5

94205e3c62f4c9a595078ad44c3e9754
SHA1

d30bc6d81209637bdca66c13233b9044a3672952
SHA256

9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab
SHA512

7288ce33b4dbc619c3012f5aaf677985eb155f994d5f81a22b551742ad7b6ab6adbae445790cbb4c741636895746680b2b41239f3622a010b04f7cfc62c926ba
SSDEEP

1536:/Z7OdkD3mjJUkMKScRYcBGMCcwxxKrOJniYLrW6idb7pRvUsIvMxHxoKvJj/anh:p3D3UUkMKYcBGddcOJniYe6idb7pR8s6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1624	1988	WerFault.exe	25

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 1624	1988	9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe	26
PID 1988 wrote to memory of 1624	1988	9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe	26
PID 1988 wrote to memory of 1624	1988	9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe	26
PID 1988 wrote to memory of 1624	1988	9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe	26

C:\Users\Admin\AppData\Local\Temp\9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe
"C:\Users\Admin\AppData\Local\Temp\9b066f5fc10915fa462d0d8a87dd611561a37489f6b071d686e707d1ba9b41ab.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1988 -s 244
  2⤵
  - Program crash
  PID:1624

memory/1988-54-0x0000000075911000-0x0000000075913000-memory.dmp

Filesize
8KB

Download
memory/1988-55-0x0000000002DA0000-0x0000000002DB9000-memory.dmp

Filesize
100KB

Download
memory/1988-61-0x0000000000270000-0x0000000000285000-memory.dmp

Filesize
84KB

Download
memory/1988-62-0x0000000002DA1000-0x0000000002DA3000-memory.dmp

Filesize
8KB

Download
memory/1988-64-0x0000000000270000-0x0000000000285000-memory.dmp

Filesize
84KB

Download