2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8

Analysis

max time kernel
40s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 04:40

Target

2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe
Size

755KB
MD5

a29d1a4e3c30cc82dff4a61810b6c1b0
SHA1

2dd60aa598f2834c8c511bae91bf695ca8bffa0e
SHA256

2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8
SHA512

de9d0bd509028c300aa810cdb1a4c35b829b9bc90ad4dfb189f8332d098563fe8eca753b8f9caad5c30eea9b86030bc0a8adfe5f4895aec7b76daf61cc6aeb57
SSDEEP

12288:4mfaXiGQeN/7YkrWBfWhvRhQU6wfMfkg159PUTtgim9:BayGQeN/7DSBfWhSfvhPUTiim9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1756	2040	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 1756	2040	2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe	28
PID 2040 wrote to memory of 1756	2040	2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe	28
PID 2040 wrote to memory of 1756	2040	2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe	28
PID 2040 wrote to memory of 1756	2040	2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe	28

C:\Users\Admin\AppData\Local\Temp\2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe
"C:\Users\Admin\AppData\Local\Temp\2b51f0ba5629aac8e98a23da41b863f5377d645bbb391f4e8253a6392c06ebb8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 276
  2⤵
  - Program crash
  PID:1756