Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231130-en -
resource tags
-
submitted
12-12-2023 02:10
General
-
Target
d103d06dabbf9e74d9b89d4d2b3436b150078bcbabbb715a7765b3b0c3fa8a62.exe
-
Size
133.0MB
-
MD5
c55a3710081b47532c1147641adab940
-
SHA1
683bf3ee8444d6b1fbe27e0c4ad7c8e88cbc26b8
-
SHA256
d103d06dabbf9e74d9b89d4d2b3436b150078bcbabbb715a7765b3b0c3fa8a62
-
SHA512
aba249f32104b842f282da2aee497edb94c7c058171edb4750587d6d870f560a94b51f9423ba840d4b6b5afa242b3ef445783b7e2f97b36b22de876f3073935c
-
SSDEEP
786432:VWXgF/LWzNQXBVBEEIVeHDWIBV0aMoSctbw17p2NsBHae7XRYBix72TtLwSTRpfF:VWa/LvKeh0ew19S8ae7XRuiRAhB
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d103d06dabbf9e74d9b89d4d2b3436b150078bcbabbb715a7765b3b0c3fa8a62.exe"C:\Users\Admin\AppData\Local\Temp\d103d06dabbf9e74d9b89d4d2b3436b150078bcbabbb715a7765b3b0c3fa8a62.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 852 -s 12682⤵
- Program crash
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.5MB
-
Filesize
9.5MB
-
Filesize
8.4MB
-
Filesize
11.9MB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
72KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
932KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
932KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
116KB
-
Filesize
116KB
-
Filesize
72KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
11.9MB
-
Filesize
8.4MB