e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
06-11-2023 09:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe
Size

6.0MB
MD5

bfff9c6a4f00feb2d3cb8786c6c64c5a
SHA1

086e68d1f3dfe35159495fce961c8d916edc0159
SHA256

e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b
SHA512

a082bf0a26ca16a17ca3d24fc2a94fb9aadb110952e6a23fb36419cb437333b7639d39a8509ecf9e4169b5fdbb6a434c18e063b1fd64410a5a454f0e578c7033
SSDEEP

98304:IRFFEaCd8yX0j/YnW3c4479IcN8sKATMqE:IFg8ZwnW389YsgN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3044	2112	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 3044	2112	e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe	28
PID 2112 wrote to memory of 3044	2112	e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe	28
PID 2112 wrote to memory of 3044	2112	e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe	28
PID 2112 wrote to memory of 3044	2112	e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe	28

C:\Users\Admin\AppData\Local\Temp\e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe
"C:\Users\Admin\AppData\Local\Temp\e0e7af1bddfb0ed577e5a236b1dd1941e895d630e7bf03fd413f3376ed8d721b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 208
  2⤵
  - Program crash
  PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2112-0-0x0000000000400000-0x00000000009F9000-memory.dmp

Filesize
6.0MB

Download
memory/2112-1-0x0000000077160000-0x00000000771A7000-memory.dmp

Filesize
284KB

Download
memory/2112-811-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-812-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-816-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-814-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-820-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-818-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-822-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-824-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-826-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-828-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-830-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-832-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-834-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-836-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-838-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-840-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-842-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-844-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-846-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-848-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-850-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-852-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-858-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-856-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-854-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-860-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-864-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-862-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-866-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-868-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-870-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-872-0x0000000002680000-0x0000000002791000-memory.dmp

Filesize
1.1MB

Download
memory/2112-1845-0x0000000000400000-0x00000000009F9000-memory.dmp

Filesize
6.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads