Analysis

  • max time kernel
    32s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    05-12-2022 05:56

General

  • Target

    c9ee05da9f18c729852bf60d92ccd465bce40337402a91105a69fb3bb47b77f5.exe

  • Size

    252KB

  • MD5

    0cd91e94e7c7fc8298b282f076629f78

  • SHA1

    52778fdda98ca4be8b9a7520a417452092b6d8f3

  • SHA256

    c9ee05da9f18c729852bf60d92ccd465bce40337402a91105a69fb3bb47b77f5

  • SHA512

    e4fb66fb07f319f7b5b3499f2ec88710092735880d897b75426eef2d031365a23ff582f12ca09692dfd9a759f2de9765148618c88d3c0e5091ddefbe06c4fee3

  • SSDEEP

    6144:9OZKgXJo4dWrRykZRshWuR6o2gdYzm5nTp639iPm:4ggbd8gkZRkZAoTIKn4l

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c9ee05da9f18c729852bf60d92ccd465bce40337402a91105a69fb3bb47b77f5.exe
    "C:\Users\Admin\AppData\Local\Temp\c9ee05da9f18c729852bf60d92ccd465bce40337402a91105a69fb3bb47b77f5.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1632 -s 204
      2⤵
      • Program crash
      PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/948-55-0x0000000000000000-mapping.dmp

  • memory/1632-54-0x00000000757B1000-0x00000000757B3000-memory.dmp

    Filesize

    8KB