Analysis
- max time kernel
119s - max time network
122s - platform
windows7_x64 - resource
win7-20230712-en - resource tags
- submitted
18/07/2023, 12:49
General
- Target Quote List-789000.exe
- Size 572KB
- Sample230718-p2cbaaac86
- SHA256 810321f2b71adcaa676f764693491d2080735c29e509b2a546e32212a2c83ee1
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Quote List-789000.exe"C:\Users\Admin\AppData\Local\Temp\Quote List-789000.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2588 -s 6602⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2588-54-0x0000000000FE0000-0x0000000001074000-memory.dmp
memory/2588-55-0x0000000073F00000-0x00000000745EE000-memory.dmp
memory/2588-56-0x00000000049C0000-0x0000000004A00000-memory.dmp
memory/2588-57-0x00000000002D0000-0x00000000002DE000-memory.dmp
memory/2588-58-0x0000000073F00000-0x00000000745EE000-memory.dmp
memory/2588-59-0x00000000049C0000-0x0000000004A00000-memory.dmp
memory/2588-60-0x0000000000430000-0x000000000043A000-memory.dmp