1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea | Triage

Analysis

max time kernel
19s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
08-07-2022 17:49

Sharing

Report Analysis Logs

General

Target

1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe
Size

8.2MB
MD5

5b82b1c965ec9f299610a19d69496fe5
SHA1

a0f189bd06817a4af77e8384144d5a4ed13ca632
SHA256

1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea
SHA512

a826f334b7b3ab842d2d83d4314a0074699a7c866dd5d1db091997ba73f5bdbcc45396bc180f229276794ea1636276950477bd043dec480460cd528308835740

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1260 1648 WerFault.exe 1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe

description	pid	process	target process
PID 1648 wrote to memory of 1260	1648	1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe	WerFault.exe
PID 1648 wrote to memory of 1260	1648	1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe	WerFault.exe
PID 1648 wrote to memory of 1260	1648	1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe
"C:\Users\Admin\AppData\Local\Temp\1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1648

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1648 -s 96
2⤵
- Program crash
PID:1260

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1260-54-0x0000000000000000-mapping.dmp

Download
memory/1648-55-0x0000000001110000-0x0000000002074000-memory.dmp

Filesize
15.4MB

Download
memory/1648-56-0x0000000001110000-0x0000000002074000-memory.dmp

Filesize
15.4MB

Download