Resubmissions

29-09-2022 16:54

220929-veg6xacdep 10

27-09-2022 10:35

220927-mmsnlsdcc9 3

Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-09-2022 16:54

General

  • Target

    d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.exe

  • Size

    174KB

  • MD5

    9bfcdde1fc8a48cf05c5a63944c2475d

  • SHA1

    9b7b72c653d07a611ce49457c73ee56ed4c4756e

  • SHA256

    d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6

  • SHA512

    8b77d143acf2c70a4f6bb088a2251cd1a5299ecd563360db73f34c2b7e8109ea626ff811c5425e85a969d76561b63bb5f2817e6ae840d3d371cebdc46a11693d

  • SSDEEP

    3072:B8TumTPHOPRVtmJYF6oi3e3oCWitYPvLIpDjEZ8fPDIPeuB44cEFreBmlytuKqrG:BpEHIHQ6RY7IpnE7GuB4/EFre1u3uH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.exe
    "C:\Users\Admin\AppData\Local\Temp\d78b0a79658aaad0f12dc4e3f3c86d9c23db2dbff9ebb954a232208c017c6fa6.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:752
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 752 -s 100
      2⤵
      • Program crash
      PID:1584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1584-54-0x0000000000000000-mapping.dmp