29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
31/08/2023, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe
Size

11.7MB
MD5

a636c2c3ded46bc9e191cd8d6427bc9b
SHA1

076e703ab8c426ced450bf8351e3a435cf15f806
SHA256

29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735
SHA512

29cd2b9a34fe0684a53ed63a61893e170a0ddf3a605920b02a42524cbfd9de4f49c291f8a67e4f02b061adb38ab44a136c43d10edace3c4483e28bbc44d28f33
SSDEEP

196608:/kPo/1CNPp0U3qpgg+fsP8JeX4O7NADtV6v+iIa80GtVpwxeohbi+aGsuzEb1:JUNR3jG73IAGQeAiLGsGEx

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	2296	WerFault.exe	27

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2296	29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2960	2296	29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe	28
PID 2296 wrote to memory of 2960	2296	29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe	28
PID 2296 wrote to memory of 2960	2296	29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe	28
PID 2296 wrote to memory of 2960	2296	29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe	28

C:\Users\Admin\AppData\Local\Temp\29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe
"C:\Users\Admin\AppData\Local\Temp\29341e40715612d6f46498f44085804ebd59f58053d16ad925351b7d71f44735.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 264
  2⤵
  - Program crash
  PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2296-0-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2296-2-0x0000000000400000-0x0000000000FB0000-memory.dmp

Filesize
11.7MB

Download
memory/2296-3-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2296-5-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2296-6-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download
memory/2296-8-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download
memory/2296-10-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download
memory/2296-13-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/2296-15-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/2296-18-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/2296-20-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/2296-23-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download
memory/2296-25-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download
memory/2296-28-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/2296-30-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/2296-31-0x0000000000400000-0x0000000000FB0000-memory.dmp

Filesize
11.7MB

Download
memory/2296-33-0x0000000002A80000-0x0000000002FE6000-memory.dmp

Filesize
5.4MB

Download
memory/2296-34-0x0000000002A80000-0x0000000002FE6000-memory.dmp

Filesize
5.4MB

Download