Analysis

  • max time kernel
    44s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 10:06

General

  • Target

    ffc7474e02c69d91265352403ab20188bf4aa8ace170f7aa6836f647e7810784.exe

  • Size

    285KB

  • MD5

    924c4ccec7d5378c5801741c9d9f2ee9

  • SHA1

    7c739d594e3e72a542fc1251844e2109aa828149

  • SHA256

    ffc7474e02c69d91265352403ab20188bf4aa8ace170f7aa6836f647e7810784

  • SHA512

    c84161907ce521e7e3034ed90e7dc8b13e836bbaed56498eb1102f90336299b516d7ce0277fd0ecf37a34e11da2dfdb2bd050b783f8be329d867580a960b85e9

  • SSDEEP

    6144:GWxv1xwqgirJ0E6LQhMe8iD20xmBZoWaGEPMSNwRx2L:XsG0u78e0MofSNwRoL

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffc7474e02c69d91265352403ab20188bf4aa8ace170f7aa6836f647e7810784.exe
    "C:\Users\Admin\AppData\Local\Temp\ffc7474e02c69d91265352403ab20188bf4aa8ace170f7aa6836f647e7810784.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 36
      2⤵
      • Program crash
      PID:1812

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads