Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
19/07/2023, 12:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FRA-XwcKdMDcpcV1Rjr.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
FRA-XwcKdMDcpcV1Rjr.exe
Resource
win10v2004-20230703-en
13 signatures
150 seconds
General
-
Target
FRA-XwcKdMDcpcV1Rjr.exe
-
Size
590KB
-
MD5
b991a513b8bd33bce6014a6907461eae
-
SHA1
f72d34ea76d3ca8aee95419a46d862d137ccae14
-
SHA256
4b899a1465e8a93502b8eff43fcc1c925fedd246148b02bf50d7f177ab7c2d52
-
SHA512
c195e667db8c3c3e4efd4588750e7d942efe6f05aa9d05c54d9c62d7379e8ef0232c5b4fd7efcc15d30bbaff0cc49d91d2385c940486a2e49dbf124ab4506258
-
SSDEEP
12288:f5PYPfY7apHdIi5iDTe4Nsb/qyDbOYPg1gUlhtB0OJzRkhkzLRcka:BPYPgGpnQDTPGzDbrYvIOJzG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3016 2680 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2680 wrote to memory of 3016 2680 FRA-XwcKdMDcpcV1Rjr.exe 30 PID 2680 wrote to memory of 3016 2680 FRA-XwcKdMDcpcV1Rjr.exe 30 PID 2680 wrote to memory of 3016 2680 FRA-XwcKdMDcpcV1Rjr.exe 30 PID 2680 wrote to memory of 3016 2680 FRA-XwcKdMDcpcV1Rjr.exe 30