f2f2122cf3ead8594bb7e3123da6fc5aef8d51bf31fcbbbae46bc7dc57ce0b21

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 09:29

Target

9b51fc2319587c4e2bf340df5a11a704.exe
Size

35KB
MD5

9b51fc2319587c4e2bf340df5a11a704
SHA1

4cd1d7349d8bb0d509d5e5f22ce38180438800d2
SHA256

f2f2122cf3ead8594bb7e3123da6fc5aef8d51bf31fcbbbae46bc7dc57ce0b21
SHA512

7d52ab0e5a07410e00f99a36202168f79ba708cbe2a185a460fc48a170fd8364783184e11cb15e8de89d43cfbfa84842e0fe36216d3f92132b8e8b2768f65993
SSDEEP

768:glg6/6RwNoxE6uUw2gWEarZQ/gVsQ9LdegcVswMHteGX:glgRK6O6uUvgWEUigVL9ggcVBMHMGX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2612	2248	WerFault.exe	17

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2612	2248	9b51fc2319587c4e2bf340df5a11a704.exe	28
PID 2248 wrote to memory of 2612	2248	9b51fc2319587c4e2bf340df5a11a704.exe	28
PID 2248 wrote to memory of 2612	2248	9b51fc2319587c4e2bf340df5a11a704.exe	28
PID 2248 wrote to memory of 2612	2248	9b51fc2319587c4e2bf340df5a11a704.exe	28

C:\Users\Admin\AppData\Local\Temp\9b51fc2319587c4e2bf340df5a11a704.exe
"C:\Users\Admin\AppData\Local\Temp\9b51fc2319587c4e2bf340df5a11a704.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 36
  2⤵
  - Program crash
  PID:2612