7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
07-07-2023 11:01

Target

7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe
Size

326KB
MD5

5a5b3128a7f9fd3d8a1e38174c3fe6b6
SHA1

4102d5be0e849ffc01ea2025a7f4974d2f65462a
SHA256

7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9
SHA512

431d9a4f9038121c5f3894a086f6034d50ae1555431e2853b2552450fed52367cdfd6ae957bd61ccade3d03c39b11542da30cd353a4abfb15381bef15e8163a5
SSDEEP

6144:tMnZbt16uJsVjJmBijCaL0vg7sKJAe/KcHTnIUBE1ZB+whCOW6/emJdUeRclXeN2:tMnht16uJsVjJmBijCaL0vg7sKJAe/Kk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2356	2020	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2356	2020	7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe	29
PID 2020 wrote to memory of 2356	2020	7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe	29
PID 2020 wrote to memory of 2356	2020	7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe	29
PID 2020 wrote to memory of 2356	2020	7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe	29

C:\Users\Admin\AppData\Local\Temp\7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe
"C:\Users\Admin\AppData\Local\Temp\7f255e49f7029e32ec4c499ecffda9c64eb2f68f51256a9410c40d20f314aae9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2020 -s 88
  2⤵
  - Program crash
  PID:2356