cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
13-11-2023 03:53

Target

cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe
Size

12.6MB
MD5

2b4e00f7fb80e9e56ded649cfc61ab55
SHA1

ed513ba445807335eb730fbe724cd38062540803
SHA256

cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb
SHA512

9e9551478491fbdf13556cc426910ef52f8575d8243f940f3eb34684d00ae9a765dbf8854edaf718ac5719d378a3014ade9106d743360906fc51cec1206269e9
SSDEEP

196608:VUBVvcLcLcLcbcXE/JgfmA/STG5555LsjwfP:VUBFcLcLcLcbc4gfkTG5555LsEf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2376 2244 WerFault.exe cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe

pid	pid_target	process	target process
2376	2244	WerFault.exe	cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe

description	pid	process	target process
PID 2244 wrote to memory of 2376	2244	cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe	WerFault.exe
PID 2244 wrote to memory of 2376	2244	cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe	WerFault.exe
PID 2244 wrote to memory of 2376	2244	cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe	WerFault.exe
PID 2244 wrote to memory of 2376	2244	cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe
"C:\Users\Admin\AppData\Local\Temp\cc1b10edd9b101cae0bc9788aaf185d890b0a3c0f2113d7bf739bc456c12eeeb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 552
2⤵
- Program crash
PID:2376

memory/2244-0-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download
memory/2244-1-0x0000000001140000-0x0000000001DE6000-memory.dmp

Filesize
12.6MB

Download
memory/2244-2-0x00000000748A0000-0x0000000074F8E000-memory.dmp

Filesize
6.9MB

Download