c41e891e02edb2af7af3bf6f6d8820fd92bde40b03c1cd7170a6ccc0859fbf10 | Triage

Analysis

max time kernel
28s
max time network
33s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
08-07-2023 16:24

Sharing

Report Analysis Logs

General

Target

7fc30cd7bb1e07exeexeexeex.exe
Size

2.1MB
MD5

7fc30cd7bb1e07e25904e538939330cc
SHA1

35c0742c0e969be2cea29773728b5bf1bc0f54b8
SHA256

c41e891e02edb2af7af3bf6f6d8820fd92bde40b03c1cd7170a6ccc0859fbf10
SHA512

0b8e40b4c5bb8a1a0b1ca57f0e49bc19afd638bbf0c0209b85eb2b324e6033ca6e4eec75c9df50cbcce0e640f12b0f16e4f92f125e542a634ce5a4a03815adf8
SSDEEP

49152:Y9yiCJ5rFwnANZGEXeZ+9ax8egOSDAmosh3ANkTTl:HJ5rFwnApelgOS9V3AM

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2344	2160	WerFault.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 2344	2160	7fc30cd7bb1e07exeexeexeex.exe	29
PID 2160 wrote to memory of 2344	2160	7fc30cd7bb1e07exeexeexeex.exe	29
PID 2160 wrote to memory of 2344	2160	7fc30cd7bb1e07exeexeexeex.exe	29
PID 2160 wrote to memory of 2344	2160	7fc30cd7bb1e07exeexeexeex.exe	29

C:\Users\Admin\AppData\Local\Temp\7fc30cd7bb1e07exeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\7fc30cd7bb1e07exeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2160 -s 116
  2⤵
  - Program crash
  PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads