f518ff8f69d1ea32296a2c238432a9aa4cc231a1bebf45aff13afbf8beac7cca | Triage

Analysis

max time kernel
27s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
07/07/2023, 13:04

Sharing

Report Analysis Logs

General

Target

4e8b45cb3e2c19exeexeexeex.exe
Size

204KB
MD5

4e8b45cb3e2c19ad2047d49bc4ca92bc
SHA1

b25f54ee5caee7d5b8ae40d75da5e4231af3be88
SHA256

f518ff8f69d1ea32296a2c238432a9aa4cc231a1bebf45aff13afbf8beac7cca
SHA512

19b98577a0af5fa00e34e66e079c8f88eecf5f42b0d1926df37cdce303e5ec0c8edbec58f00187289a6dd25e2e69240695eef7789c209b21622c4f712e7568cc
SSDEEP

3072:fd9ld9PZABQmadmx3dtO0cPlDJBFt2//OLlJiQq7gwTWn:l7eBQPd1rPpTFthlJFq7RG

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	2284	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 2960	2284	4e8b45cb3e2c19exeexeexeex.exe	28
PID 2284 wrote to memory of 2960	2284	4e8b45cb3e2c19exeexeexeex.exe	28
PID 2284 wrote to memory of 2960	2284	4e8b45cb3e2c19exeexeexeex.exe	28
PID 2284 wrote to memory of 2960	2284	4e8b45cb3e2c19exeexeexeex.exe	28

C:\Users\Admin\AppData\Local\Temp\4e8b45cb3e2c19exeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\4e8b45cb3e2c19exeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 36
  2⤵
  - Program crash
  PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2284-54-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download