b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/06/2024, 02:38

Target

b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe
Size

753KB
MD5

7c64396b6c72c7c9d434e8ce463e4961
SHA1

df659fa150359a1e94a148487814b0f8dc2c8e57
SHA256

b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437
SHA512

95398ef8221ca684c46b2107ea050b32e58df08a4a2734f5bc9e96a422913db8ae3e648023719a41c2fe12b8c8965d19c4100ef619d489faf81704427aaa9460
SSDEEP

12288:gxQ/9dvV1aaPGjHpfgnABYVU/4pYDm6gmQo8LsXwT96EptDyQoBO+36C:gQ913oJonAB54Djo8YK6E/DyQoBZ6C

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1072	2240	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1072	2240	b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe	28
PID 2240 wrote to memory of 1072	2240	b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe	28
PID 2240 wrote to memory of 1072	2240	b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe	28
PID 2240 wrote to memory of 1072	2240	b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe	28

C:\Users\Admin\AppData\Local\Temp\b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe
"C:\Users\Admin\AppData\Local\Temp\b651fd73963fb3f490bf3d38f693b6ba2899b777d8e993b3d98bad0e2f90a437.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 652
  2⤵
  - Program crash
  PID:1072

memory/2240-0-0x0000000074B2E000-0x0000000074B2F000-memory.dmp

Filesize
4KB

Download
memory/2240-1-0x00000000001A0000-0x0000000000262000-memory.dmp

Filesize
776KB

Download
memory/2240-2-0x0000000074B20000-0x000000007520E000-memory.dmp

Filesize
6.9MB

Download
memory/2240-3-0x0000000074B2E000-0x0000000074B2F000-memory.dmp

Filesize
4KB

Download
memory/2240-4-0x0000000074B20000-0x000000007520E000-memory.dmp

Filesize
6.9MB

Download