207bc6218d1ced2b74e70e4584f1fdafa56fb917c8eb4b0965831538f6b1ba61 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:44

Sharing

Report Analysis Logs

General

Target

0a7fae47c0fab5cf935fcc9a4bc46458.exe
Size

535KB
MD5

0a7fae47c0fab5cf935fcc9a4bc46458
SHA1

b47e26f699a90368d69309e84d9bdcd9d74c1fa8
SHA256

207bc6218d1ced2b74e70e4584f1fdafa56fb917c8eb4b0965831538f6b1ba61
SHA512

bf0cb2ee5872ca3d2e054073cfbe61e787f6ba337521e42736e73f0a4caa856f59d216e37bb6ff1e631b483d43b1e600ea7ef0a4ea4e1d2b38978ceb60b00be7
SSDEEP

12288:6HG2i3dQXDWlEcSf/Llh3PC0npHlbLTsQVm:Wl2KwSfjPDpHFTf

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2548	2436	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2548	2436	0a7fae47c0fab5cf935fcc9a4bc46458.exe	28
PID 2436 wrote to memory of 2548	2436	0a7fae47c0fab5cf935fcc9a4bc46458.exe	28
PID 2436 wrote to memory of 2548	2436	0a7fae47c0fab5cf935fcc9a4bc46458.exe	28
PID 2436 wrote to memory of 2548	2436	0a7fae47c0fab5cf935fcc9a4bc46458.exe	28

C:\Users\Admin\AppData\Local\Temp\0a7fae47c0fab5cf935fcc9a4bc46458.exe
"C:\Users\Admin\AppData\Local\Temp\0a7fae47c0fab5cf935fcc9a4bc46458.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 156
  2⤵
  - Program crash
  PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads