4704b88695068928ff3a86b8463404436e3d32fe14d147e725c032f52be8bf77 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

53347f270d1791aee307a85b3a1b51df.exe
Size

28KB
MD5

53347f270d1791aee307a85b3a1b51df
SHA1

b6ab92e7dbe5064417ffcbc5f1d88fdfa34bf8bf
SHA256

4704b88695068928ff3a86b8463404436e3d32fe14d147e725c032f52be8bf77
SHA512

20a0583fef75afba49927dd1e070b1b8572fd406ae35a7a5ee6c876ef9fbed8df0e897e42fcb78aa66084aeb5be4dca205ae16cecf0e6027497aa61a22ea54d9
SSDEEP

768:+8iWWRoOPUmcKg5Do+fsF4TCoL9wX+SMkG1Bae:+8tzQUm+asCoL91SMVBJ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1972	2208	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 1972	2208	53347f270d1791aee307a85b3a1b51df.exe	28
PID 2208 wrote to memory of 1972	2208	53347f270d1791aee307a85b3a1b51df.exe	28
PID 2208 wrote to memory of 1972	2208	53347f270d1791aee307a85b3a1b51df.exe	28
PID 2208 wrote to memory of 1972	2208	53347f270d1791aee307a85b3a1b51df.exe	28

C:\Users\Admin\AppData\Local\Temp\53347f270d1791aee307a85b3a1b51df.exe
"C:\Users\Admin\AppData\Local\Temp\53347f270d1791aee307a85b3a1b51df.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2208 -s 88
  2⤵
  - Program crash
  PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2208-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download