8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01

Analysis

max time kernel
25s
max time network
28s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09/03/2023, 04:41

Target

8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe
Size

5.2MB
MD5

78a1d530498ce30596b250633724198b
SHA1

e69ab784b1ac2ba37dd163851398b1557d26afbb
SHA256

8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01
SHA512

844ce7989b6aebd5c1ee300aa83fb2e962cde61ba34a74f4c3eca071df8ac1450a52bc7553d8c45b12b2b59cfec4e4353532a496d9dc34e64ebac2f1d26cf84d
SSDEEP

98304:OzW1FDCt7PM9mJRojwDP4UvV2NrRfHOYw6On1j8PYOkdgcKmmPLe2O:OzW1FDA8Ha4SmVfh/On1jFOkakKeZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1952	1556	WerFault.exe	27

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28
PID 1556 wrote to memory of 1952	1556	8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe	28

C:\Users\Admin\AppData\Local\Temp\8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe
"C:\Users\Admin\AppData\Local\Temp\8219322f46b9f650ea96ad58b7ff008b34396052e20ec2f760192ca0803c3f01.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 224
  2⤵
  - Program crash
  PID:1952