2f68974a1c21bc9cebe789654255084b5abf3b2115c55d32a8727c0d87ccdfe4 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
23/07/2023, 15:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NA_NA_10bc73f6d103b4exeexe_JC.exe
Size

2.1MB
MD5

10bc73f6d103b47efd7762a5efa4df8f
SHA1

8c5b7de45bc08b45198c246d7f4b65294b5d2b9f
SHA256

2f68974a1c21bc9cebe789654255084b5abf3b2115c55d32a8727c0d87ccdfe4
SHA512

4181ba5ed5821df487038aedcf6f1a40703149fe53fe3bcb979e7a5809e08485a6d8210f6a8cff3750d392a9da59706f959b5661a9f58dabc0f195b9b688ffd4
SSDEEP

49152:j9yiCJ5rFwnANZGEXeZ+9Ox8egOSDAmosh3ANkTTl:8J5rFwnApepgOS9V3AM

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1556	2300	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 1556	2300	NA_NA_10bc73f6d103b4exeexe_JC.exe	28
PID 2300 wrote to memory of 1556	2300	NA_NA_10bc73f6d103b4exeexe_JC.exe	28
PID 2300 wrote to memory of 1556	2300	NA_NA_10bc73f6d103b4exeexe_JC.exe	28
PID 2300 wrote to memory of 1556	2300	NA_NA_10bc73f6d103b4exeexe_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\NA_NA_10bc73f6d103b4exeexe_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NA_NA_10bc73f6d103b4exeexe_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2300 -s 116
  2⤵
  - Program crash
  PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads