Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    01-07-2022 18:33

General

  • Target

    DHL_Mexico invoice101060.exe

  • Size

    653KB

  • MD5

    559d1039dbea67d63b86fe138a4714ee

  • SHA1

    cc80047c060d58c384e5060104b9e408651e32a5

  • SHA256

    9fc307afd60cf86fcd93464e2b89a3de2016230e5c6c43ce1b58ce1ae605dae7

  • SHA512

    4e00f0882d186093b85715ce4d1735d849148baa8c142537d1efa3d6226e43233236aa1ddabcc921e82d39ffa01087d5ea292751140fc4326464de43293c57bc

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DHL_Mexico invoice101060.exe
    "C:\Users\Admin\AppData\Local\Temp\DHL_Mexico invoice101060.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1840
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1840 -s 592
      2⤵
      • Program crash
      PID:660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/660-56-0x0000000000000000-mapping.dmp
  • memory/1840-54-0x0000000000110000-0x00000000001BA000-memory.dmp
    Filesize

    680KB

  • memory/1840-55-0x0000000001E30000-0x0000000001E9A000-memory.dmp
    Filesize

    424KB