607222c440301c990bedbc4c8e9151215e231d1b578efc4a42c518bf60f8b2bd | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
05/08/2023, 20:45

Sharing

Report Analysis Logs

General

Target

7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe
Size

2.4MB
MD5

7b808534915a153ad36bec2f9d9e67a4
SHA1

474335b556c962c89f9c09497f0f94fa66848eb8
SHA256

607222c440301c990bedbc4c8e9151215e231d1b578efc4a42c518bf60f8b2bd
SHA512

90ae967e5e0b1391bb41a9a11b3797b4b0fb43de2194083c2f0f838c73dc187a2a5fefd859f27ff63e858597944432cb6dae9ab8d88d3a1df141aa05a3728c7f
SSDEEP

49152:IcJX9fUtrxTHIPyfSIT7ZNx+WVPUbYDj:jvUtrxToPyw

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2640	2560	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2560 wrote to memory of 2640	2560	7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe	28
PID 2560 wrote to memory of 2640	2560	7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe	28
PID 2560 wrote to memory of 2640	2560	7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe	28
PID 2560 wrote to memory of 2640	2560	7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\7b808534915a153ad36bec2f9d9e67a4_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2560 -s 168
  2⤵
  - Program crash
  PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads