Analysis

  • max time kernel
    41s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    25/11/2022, 08:39

General

  • Target

    61f85018f3dc5507215911a37a9f570b85a227d85b2adcaf8e354f411f300c57.exe

  • Size

    809KB

  • MD5

    c00550100dd45f61bfa2aa3520af26cb

  • SHA1

    a293e30ebed39838b2c8ff9dbc574850a1510d16

  • SHA256

    61f85018f3dc5507215911a37a9f570b85a227d85b2adcaf8e354f411f300c57

  • SHA512

    52261a1990f051f3eeb13661053bf5b5f39d149cd59505472ef483429fba0374a2331e7d2add72dfecd17722e67e9af17741e3afc79aec4d10a5e84d19b1fddf

  • SSDEEP

    6144:+295L1rTbDCvzYZqP54lwwdAblvUbeKfyp:v5L1rTbDCvGAbakp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61f85018f3dc5507215911a37a9f570b85a227d85b2adcaf8e354f411f300c57.exe
    "C:\Users\Admin\AppData\Local\Temp\61f85018f3dc5507215911a37a9f570b85a227d85b2adcaf8e354f411f300c57.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1688 -s 68
      2⤵
      • Program crash
      PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-55-0x0000000000660000-0x0000000000683000-memory.dmp

    Filesize

    140KB