d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06

Analysis

max time kernel
41s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 02:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe
Size

727KB
MD5

ad26dbb8f9fa645c178c339561e858a3
SHA1

bf4a9ced6d2f29d13545a82db6b45cda33356e34
SHA256

d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06
SHA512

3d6cc05b22e2695a4d9377b7c83308f4ee2e161335e562cb5265a6c0ea5df050572f90ccf9abd3fda3b6d96d1ebba100be8fa7f8a1d37daa6275b5ed72c2a539
SSDEEP

12288:ArymXBk6xCzWtxlXn3tm6pA5WIGP9KJfdx1w4V/4IFow3aLNfcWB2Q5HdGYMMl:ArVXvjlXgUA5nGlWdnJLFow3a6WB/5Hf

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
284	564	WerFault.exe	11

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe
564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 564 wrote to memory of 284	564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe	28
PID 564 wrote to memory of 284	564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe	28
PID 564 wrote to memory of 284	564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe	28
PID 564 wrote to memory of 284	564	d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe	28

C:\Users\Admin\AppData\Local\Temp\d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe
"C:\Users\Admin\AppData\Local\Temp\d0abecb49fd70244b069cb0ef4ee45b62525715f6cf063d1e8846b4383e97c06.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:564
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 564 -s 488
  2⤵
  - Program crash
  PID:284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/564-70-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-72-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-59-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-57-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-58-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-60-0x0000000000400000-0x0000000000927000-memory.dmp

Filesize
5.2MB

Download
memory/564-61-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-63-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-62-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-64-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-66-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-65-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-67-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-69-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-68-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download
memory/564-56-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-75-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-71-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-76-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-74-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-73-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-79-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-80-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-77-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-81-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-82-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-84-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-83-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-85-0x00000000004E7000-0x00000000004EA200-memory.dmp

Filesize
12KB

Download
memory/564-55-0x0000000000400000-0x0000000000927000-memory.dmp

Filesize
5.2MB

Download
memory/564-87-0x000000007EF50000-0x000000007EFAC000-memory.dmp

Filesize
368KB

Download
memory/564-88-0x0000000000400000-0x0000000000927000-memory.dmp

Filesize
5.2MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads