Analysis
- max time kernel
122s - max time network
127s - platform
windows7_x64 - resource
win7-20231020-en - resource tags
- submitted
22/10/2023, 07:41
General
- Target Shipment Notification 7098216766.exe
- Size 630KB
- Sample231022-jh57csec21
- SHA256 0e738141435d85c326c49dba8cdc7bfdc990188d32f3447e797162bfaabb3301
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Shipment Notification 7098216766.exe"C:\Users\Admin\AppData\Local\Temp\Shipment Notification 7098216766.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 6682⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2484-0-0x00000000008C0000-0x0000000000964000-memory.dmp
memory/2484-1-0x0000000074BF0000-0x00000000752DE000-memory.dmp
memory/2484-2-0x0000000004E60000-0x0000000004EA0000-memory.dmp
memory/2484-3-0x00000000004F0000-0x0000000000502000-memory.dmp
memory/2484-4-0x0000000074BF0000-0x00000000752DE000-memory.dmp
memory/2484-5-0x0000000004E60000-0x0000000004EA0000-memory.dmp
memory/2484-6-0x0000000000510000-0x0000000000520000-memory.dmp