Analysis

  • max time kernel
    39s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 11:34

General

  • Target

    9947b09b5518845c4601938c871fc7bc5c65f2f9791020cc432d6129e6c71236.exe

  • Size

    67KB

  • MD5

    ed3dae1f4d68cf87d83bc411787824ce

  • SHA1

    f9852fba45bd7a53b668e7198a3ce8c00fb9b117

  • SHA256

    9947b09b5518845c4601938c871fc7bc5c65f2f9791020cc432d6129e6c71236

  • SHA512

    ca545b73373b59f27b1b7dac4ed884f1f3b929c93b6cc12f823ecccb082fd362b015daa385df8e3b1baa30f3f65bb201e711edb8a9d1b87eebb1b8df0e53f776

  • SSDEEP

    1536:3ZPjAXDfP2q8TFzOkWI1/8k/QKegC39/:3hjGDfP2q8TJVZQgC3

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9947b09b5518845c4601938c871fc7bc5c65f2f9791020cc432d6129e6c71236.exe
    "C:\Users\Admin\AppData\Local\Temp\9947b09b5518845c4601938c871fc7bc5c65f2f9791020cc432d6129e6c71236.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2020 -s 116
      2⤵
      • Program crash
      PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2020-54-0x0000000075451000-0x0000000075453000-memory.dmp

    Filesize

    8KB

  • memory/2020-55-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2020-56-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB