7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 21:31

Target

7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe
Size

1.9MB
MD5

a61de0c872bd70b93c98532647852c53
SHA1

6af7c35ee05513fc172e2aefdb58bb753a0ff2cd
SHA256

7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc
SHA512

43cc3896ac9e85503ec1f9abb743468f7e2712223b78d49cca0de9b863015806792af8e230a8654562dfbed234bfdf605a845f2baf83f8c3b5a4fadd8fb4e0e7
SSDEEP

49152:B1tlBBduVc9Qbsnk62zHznhXT5X1H2GNTA1w4:rPObsn+hD5zNTA17

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 2352	2332	7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe	28
PID 2332 wrote to memory of 2352	2332	7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe	28
PID 2332 wrote to memory of 2352	2332	7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe	28

C:\Users\Admin\AppData\Local\Temp\7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe
"C:\Users\Admin\AppData\Local\Temp\7c067e1c345d3699108782b888a97e3d20d6214a54d7ff115a5ee5ba8eafa2bc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2332 -s 144
  2⤵
  PID:2352