Analysis
- max time kernel
118s - max time network
123s - platform
windows7_x64 - resource
win7-20231020-en - resource tags
- submitted
22/10/2023, 07:41
General
- Target Payment Notice dated 09.10.2023.exe
- Size 573KB
- Sample231022-jh57csec2x
- SHA256 5977996d323c55bc5c986f78eac6da795ea114b0ef57d4f062ca618de28daea5
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Payment Notice dated 09.10.2023.exe"C:\Users\Admin\AppData\Local\Temp\Payment Notice dated 09.10.2023.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 6682⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2200-0-0x0000000000EF0000-0x0000000000F84000-memory.dmp
memory/2200-1-0x00000000744E0000-0x0000000074BCE000-memory.dmp
memory/2200-2-0x0000000004EE0000-0x0000000004F20000-memory.dmp
memory/2200-3-0x0000000000330000-0x0000000000342000-memory.dmp
memory/2200-4-0x00000000744E0000-0x0000000074BCE000-memory.dmp
memory/2200-5-0x0000000004EE0000-0x0000000004F20000-memory.dmp
memory/2200-6-0x0000000000350000-0x0000000000360000-memory.dmp