51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-04-2024 07:30

Target

51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe
Size

731KB
MD5

57a169a5a3ca09a0ede3fedc50e6d222
SHA1

e33c4e6f9fc572c506648737227a1aa3b07360c9
SHA256

51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49
SHA512

6fd11b9e838105270cf1b3d999c6a768bbc75da44ab0904797c06b4de473b9290c3f235c542aeebcb35ca8a9d3fd2acbd3598b3ef8300b1b048ed974ede0873e
SSDEEP

12288:2QQGv13ICxUQj/1U6eKh2oZJa3YOngDuJfrZqLbNEbctzFqOlq5V:2QQGv13ICuQewSoQgDIqLbNEaZqOlqV

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2156	2740	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2740 wrote to memory of 2156	2740	51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe	28
PID 2740 wrote to memory of 2156	2740	51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe	28
PID 2740 wrote to memory of 2156	2740	51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe	28
PID 2740 wrote to memory of 2156	2740	51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe	28

C:\Users\Admin\AppData\Local\Temp\51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe
"C:\Users\Admin\AppData\Local\Temp\51c7d270018cb968c950c514b1ed47154d04aab5ab6d213bfe4a48bfb6f10e49.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2740
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 604
  2⤵
  - Program crash
  PID:2156

memory/2740-0-0x0000000000B40000-0x0000000000C00000-memory.dmp

Filesize
768KB

Download
memory/2740-1-0x0000000074B00000-0x00000000751EE000-memory.dmp

Filesize
6.9MB

Download
memory/2740-2-0x00000000003C0000-0x00000000003CE000-memory.dmp

Filesize
56KB

Download
memory/2740-3-0x0000000007480000-0x00000000074C0000-memory.dmp

Filesize
256KB

Download
memory/2740-4-0x00000000004D0000-0x00000000004D8000-memory.dmp

Filesize
32KB

Download
memory/2740-5-0x0000000074B00000-0x00000000751EE000-memory.dmp

Filesize
6.9MB

Download
memory/2740-6-0x0000000007480000-0x00000000074C0000-memory.dmp

Filesize
256KB

Download