Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
19/07/2023, 12:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Factura 2-000059.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Factura 2-000059.exe
Resource
win10v2004-20230703-en
13 signatures
150 seconds
General
-
Target
Factura 2-000059.exe
-
Size
593KB
-
MD5
eb2415e0582ff085664d4c66754738d7
-
SHA1
2d651c548a52ad6cf247dba6ec03d0a86f872e7c
-
SHA256
4267e2d7fe9a8a024af4c37d0dfebe2b19475780ff5d503dc33aa5601d67444c
-
SHA512
d299f332c5f8867d80253f428ab7bb9c8ad0c5c91e9852731a0eddffd15f9992908a1090577d66a2f441ed83d7c89971a00661bee49b5b8109d7d0874f6a3fb0
-
SSDEEP
12288:SPYPfY7NEtj8vTAIMbmhYdQZbptosQQqI+1XY:SPYPgqtQ7AVih0QZMIWI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1696 3036 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3036 wrote to memory of 1696 3036 Factura 2-000059.exe 30 PID 3036 wrote to memory of 1696 3036 Factura 2-000059.exe 30 PID 3036 wrote to memory of 1696 3036 Factura 2-000059.exe 30 PID 3036 wrote to memory of 1696 3036 Factura 2-000059.exe 30