f4d7260f10bd18b768dea6660d6759c039da9d54b5cafca6747b627971d9c9a6 | Triage

Analysis

max time kernel
27s
max time network
31s
platform
windows7_x64
resource
win7-20230705-en
resource tags

arch:x64arch:x86image:win7-20230705-enlocale:en-usos:windows7-x64system
submitted
08-07-2023 20:08

Sharing

Report Analysis Logs

General

Target

9dbe5a2f0f8600exeexeexeex.exe
Size

2.1MB
MD5

9dbe5a2f0f8600e0feaf2444f878b948
SHA1

03c75ca1a8c965640adbf74b561ba7a748e478ef
SHA256

f4d7260f10bd18b768dea6660d6759c039da9d54b5cafca6747b627971d9c9a6
SHA512

dd01bf266151c49953843d8f44091ae98ad7b77cf71b42c0619325195f4debec989ffeb80ff71b042d1326ba222cc10b601c94b8b2b8f0665d980d96ed7c69aa
SSDEEP

49152:EAE7m9hn1sfMJJa0zOP6Qec1Y+3GdfuRbsh3ANkTTl:T9hn1sfM1OjB3GdwI3AM

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2896	2968	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2968 wrote to memory of 2896	2968	9dbe5a2f0f8600exeexeexeex.exe	27
PID 2968 wrote to memory of 2896	2968	9dbe5a2f0f8600exeexeexeex.exe	27
PID 2968 wrote to memory of 2896	2968	9dbe5a2f0f8600exeexeexeex.exe	27
PID 2968 wrote to memory of 2896	2968	9dbe5a2f0f8600exeexeexeex.exe	27

C:\Users\Admin\AppData\Local\Temp\9dbe5a2f0f8600exeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\9dbe5a2f0f8600exeexeexeex.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 116
  2⤵
  - Program crash
  PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads