24ad78510426ea836dbefc1517c6926458cd1fa65c54f1fca77ea3e07f8a806c | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 10:54

Sharing

Report Analysis Logs

General

Target

68f583a64dd4145e96fe18c7c8bdfa89.exe
Size

267KB
MD5

68f583a64dd4145e96fe18c7c8bdfa89
SHA1

30f08942021539939491732cc1adbb3dd6bb637a
SHA256

24ad78510426ea836dbefc1517c6926458cd1fa65c54f1fca77ea3e07f8a806c
SHA512

92c0ac631d349c473996489425554fe7baa87c33fe9b165a536de174f8355e5acd256409205fbce93d8873d4fd6a25f4a041d0fd9f506c7792cdc4ca4354e6fd
SSDEEP

6144:+WwMnudb/XmyQlTgALXqo1jmUZxL6xQGQgg:Tup/mPZNLXqs76P

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1104	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28
PID 2236 wrote to memory of 1104	2236	68f583a64dd4145e96fe18c7c8bdfa89.exe	28

C:\Users\Admin\AppData\Local\Temp\68f583a64dd4145e96fe18c7c8bdfa89.exe
"C:\Users\Admin\AppData\Local\Temp\68f583a64dd4145e96fe18c7c8bdfa89.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 268
  2⤵
  - Program crash
  PID:1104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2236-0-0x0000000000400000-0x00000000004D4000-memory.dmp

Filesize
848KB

Download
memory/2236-1-0x00000000008D0000-0x00000000009A4000-memory.dmp

Filesize
848KB

Download
memory/2236-2-0x00000000008D0000-0x00000000009A4000-memory.dmp

Filesize
848KB

Download
memory/2236-3-0x0000000000400000-0x00000000004D4000-memory.dmp

Filesize
848KB

Download