Analysis

  • max time kernel
    43s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 11:20

General

  • Target

    dd5c736c35f0b92448f6608f07b590f509a9a60ab1f8b2c30de3f9a206e345e5.exe

  • Size

    63KB

  • MD5

    06a54b9dd701040a3e9071291ee0da0f

  • SHA1

    ad07cb2c6bc0caac15885a0ef8a1a9848b8dd7d8

  • SHA256

    dd5c736c35f0b92448f6608f07b590f509a9a60ab1f8b2c30de3f9a206e345e5

  • SHA512

    56cacc559bec681c9034d461281099402ae3504a1c58df2831424b2f30f310bc6175a4a0f110227fc7e7ec79068e8733952d90eb14c309303a8fc2dc475278aa

  • SSDEEP

    768:Thp67N565IFIVx4crBgTzGzJy8+yf87b3kSRWwKqrFZQJBzHYsQzYCLDWLApT++K:+72V4XGzyy8K/JNHYlzYCLaLiTiMAF

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd5c736c35f0b92448f6608f07b590f509a9a60ab1f8b2c30de3f9a206e345e5.exe
    "C:\Users\Admin\AppData\Local\Temp\dd5c736c35f0b92448f6608f07b590f509a9a60ab1f8b2c30de3f9a206e345e5.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1456
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1456 -s 36
      2⤵
      • Program crash
      PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1048-54-0x0000000000000000-mapping.dmp

  • memory/1456-55-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB