6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
29/08/2023, 21:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
Size

13.0MB
MD5

e162c6a728c92408753f2dc29e31808e
SHA1

f256a997245f76029e5022b90c82e12150c6f835
SHA256

6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1
SHA512

650b993e0cb05a5dd58705d842139bd2885286d50ddbd79aee01cb2eead059c2e8ea71c7fc2f8ebc492daa4466dbaa5f35dddf12b6a0d7b8a19f3ff6e34ce221
SSDEEP

98304:XJHvitZwtqDsW3E80DCV2bh2chsLzNIu+qoOzz8MFUD9xXf7YR7s:XNiZwtqAWv0DCVUvhsLyuFjz8nXzYR7s

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2768	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2768	2436	6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe	28
PID 2436 wrote to memory of 2768	2436	6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe	28
PID 2436 wrote to memory of 2768	2436	6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe	28
PID 2436 wrote to memory of 2768	2436	6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe	28

C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
"C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 212
  2⤵
  - Program crash
  PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2436-0-0x0000000000400000-0x00000000010FB000-memory.dmp

Filesize
13.0MB

Download
memory/2436-1-0x00000000758D0000-0x0000000075917000-memory.dmp

Filesize
284KB

Download
memory/2436-811-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-812-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-814-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-816-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-818-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-820-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-822-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-824-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-826-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-828-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-830-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-832-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-834-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-836-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-838-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-840-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-842-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-844-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-846-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-848-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-850-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-852-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-854-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-856-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-858-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-860-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-862-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-864-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-866-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-868-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-870-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-872-0x0000000002D70000-0x0000000002E81000-memory.dmp

Filesize
1.1MB

Download
memory/2436-1782-0x0000000000400000-0x00000000010FB000-memory.dmp

Filesize
13.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads