275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d | Triage

Analysis

max time kernel
38s
max time network
44s
platform
windows7_x64
resource
win7-20220414-en
submitted
16-06-2022 05:15

Sharing

Report Analysis Logs

General

Target

275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe
Size

144KB
MD5

a944e5c55d22c1ea24760abe3d2cdbb5
SHA1

6f64f8ad7a3c65bb8181ca8ba928159f32732cba
SHA256

275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d
SHA512

21262162171e9b370a482c6228739b06b0be857324adf09dccaa1bf8434a5334d4e1b9c41134d4bb320fab04778528d3a159d63693cce4b7ef1d0db54f31d26a

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

796 856 WerFault.exe 275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe

description	pid	process	target process
PID 856 wrote to memory of 796	856	275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe	WerFault.exe
PID 856 wrote to memory of 796	856	275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe	WerFault.exe
PID 856 wrote to memory of 796	856	275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe	WerFault.exe
PID 856 wrote to memory of 796	856	275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe
"C:\Users\Admin\AppData\Local\Temp\275171851acf357e2b2ed052dd488fe5a5dc80922605c39717a3b934c98ede8d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 856 -s 124
2⤵
- Program crash
PID:796

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/796-55-0x0000000000000000-mapping.dmp

Download
memory/856-54-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download