cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05/06/2023, 09:25

Target

cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe
Size

60KB
MD5

af7919e66ae7ca95576d009f5c0580f1
SHA1

f3d3b6c08bea58c7e6f3b5f1768c0b650d1f6e86
SHA256

cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6
SHA512

9685e887107d3cfa9c1d6cd16286ceb6d6dee7c69e5bdc9c632dc61e0477138b6e2141465ee7f8129e334d1bec1707b0e25cc93c69d5a8d5f086545c8dc87548
SSDEEP

768:AZWfyQBWrTlz3hX5h+MfcS/7xrAiYdDNiB9ly1MbOx/nlolw:v6IWrTF3dr+Kd/pA9d3Gc9oW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1304	1736	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 1304	1736	cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe	28
PID 1736 wrote to memory of 1304	1736	cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe	28
PID 1736 wrote to memory of 1304	1736	cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe	28
PID 1736 wrote to memory of 1304	1736	cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe	28

C:\Users\Admin\AppData\Local\Temp\cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe
"C:\Users\Admin\AppData\Local\Temp\cef067e8112177fe112d84cba9b3785fc557094460b7c55ae56051a0b2aedbf6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1736 -s 92
  2⤵
  - Program crash
  PID:1304