Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2022, 23:58

General

  • Target

    89d4592e2cfd8627e481997a90f256863556ae8fcd67012fda8797cd77b9fdbc.exe

  • Size

    311KB

  • MD5

    4266e37b5d3d7b37d05b9cb9d7a34666

  • SHA1

    35f2738056c55b2067188feabc3cd8e11959c444

  • SHA256

    89d4592e2cfd8627e481997a90f256863556ae8fcd67012fda8797cd77b9fdbc

  • SHA512

    afea3666ba01626d26e67f1cd199b03d39a5ba9a0b5dd9d5cef97ea97e7267f4b8ee3cd709a0c79ba4088beacdabf0f20a8b803856062e650a0303442b8f7955

  • SSDEEP

    6144:uptfXp+x6F4Y7voI0NbdjMSkwb2if1L5kz91xSxCFYd:UfXp+xGoIWbdjMNwbn9y6sY

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\89d4592e2cfd8627e481997a90f256863556ae8fcd67012fda8797cd77b9fdbc.exe
    "C:\Users\Admin\AppData\Local\Temp\89d4592e2cfd8627e481997a90f256863556ae8fcd67012fda8797cd77b9fdbc.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:828
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 828 -s 268
      2⤵
      • Program crash
      PID:1960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/828-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

          Filesize

          8KB

        • memory/828-56-0x0000000000400000-0x000000000047D000-memory.dmp

          Filesize

          500KB

        • memory/828-57-0x0000000000320000-0x000000000039D000-memory.dmp

          Filesize

          500KB