Analysis

  • max time kernel
    121s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    23/11/2023, 01:59

General

  • Target

    b8f7edf7cd45b23dd4b32afdcc0baee277e57f8284dc533ebc1a68d12a6839b7.exe

  • Size

    262.8MB

  • MD5

    451c67087b2986d283b8f89677f586b2

  • SHA1

    a493f66f9f6ae292f5bb098957280e7253dc5265

  • SHA256

    b8f7edf7cd45b23dd4b32afdcc0baee277e57f8284dc533ebc1a68d12a6839b7

  • SHA512

    289bc9a75e56f8704ca3be558377772fc24594398a8114d61fb138322fac55f177276dd95450c217cb8d87027caed0cb528609f928c67ce31ce39da87f60a49a

  • SSDEEP

    3145728:Ns7nfS1U6z1tVjSjjv8zRdtUHvlBqOqqdGOIM4VK1Qrvsmy6eq:ofIU6cwytBmOIM4VK1Qrvsmy6eq

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b8f7edf7cd45b23dd4b32afdcc0baee277e57f8284dc533ebc1a68d12a6839b7.exe
    "C:\Users\Admin\AppData\Local\Temp\b8f7edf7cd45b23dd4b32afdcc0baee277e57f8284dc533ebc1a68d12a6839b7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1676 -s 876
      2⤵
        PID:2092

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1676-0-0x0000000002BC0000-0x0000000002FE0000-memory.dmp

            Filesize

            4.1MB

          • memory/1676-4-0x00000000123E0000-0x00000000133E0000-memory.dmp

            Filesize

            16.0MB

          • memory/1676-9-0x0000000001C10000-0x0000000001C30000-memory.dmp

            Filesize

            128KB

          • memory/1676-12-0x000000013FDC0000-0x00000001406EB000-memory.dmp

            Filesize

            9.2MB

          • memory/1676-14-0x0000000000570000-0x0000000000580000-memory.dmp

            Filesize

            64KB

          • memory/1676-18-0x0000000001D60000-0x0000000001DE0000-memory.dmp

            Filesize

            512KB

          • memory/1676-22-0x0000000001F80000-0x0000000001F90000-memory.dmp

            Filesize

            64KB

          • memory/1676-26-0x0000000001FE0000-0x0000000002030000-memory.dmp

            Filesize

            320KB

          • memory/1676-30-0x00000000020C0000-0x00000000020D0000-memory.dmp

            Filesize

            64KB

          • memory/1676-34-0x0000000002100000-0x0000000002130000-memory.dmp

            Filesize

            192KB

          • memory/1676-38-0x0000000002FE0000-0x00000000030A0000-memory.dmp

            Filesize

            768KB

          • memory/1676-42-0x0000000002160000-0x0000000002190000-memory.dmp

            Filesize

            192KB

          • memory/1676-46-0x0000000003480000-0x00000000035E0000-memory.dmp

            Filesize

            1.4MB

          • memory/1676-50-0x00000000030F0000-0x0000000003130000-memory.dmp

            Filesize

            256KB

          • memory/1676-54-0x0000000002600000-0x0000000002610000-memory.dmp

            Filesize

            64KB

          • memory/1676-58-0x0000000002610000-0x0000000002620000-memory.dmp

            Filesize

            64KB

          • memory/1676-62-0x0000000003170000-0x0000000003180000-memory.dmp

            Filesize

            64KB

          • memory/1676-186-0x000000013FDC0000-0x00000001406EB000-memory.dmp

            Filesize

            9.2MB