Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30-12-2023 20:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c3353945453cc06d559600715938145.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c3353945453cc06d559600715938145.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1c3353945453cc06d559600715938145.exe
-
Size
14KB
-
MD5
1c3353945453cc06d559600715938145
-
SHA1
2558ae1e267d7fb6fecdbc7d119e6b46c0f6baf5
-
SHA256
b21df6eca620e94cbf24d2a471a93a84c3d348cc464601e5eda75d4468649d0b
-
SHA512
d0772a9c1112a634bd6f9e7efc93b0c24b07eff5be473a5153bcfeb30f819c7afa24db0301e1ef0c061de2e3e6b8fa925ea474fda39f622ab7ccd2d065717774
-
SSDEEP
384:KDgO/77I4hE62/rsPPDv2zAeyGckpCptPxdmxFvZPRJ2:YgOze62/oX6B/ckpwtvmfhC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1220 1744 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1744 wrote to memory of 1220 1744 1c3353945453cc06d559600715938145.exe 28 PID 1744 wrote to memory of 1220 1744 1c3353945453cc06d559600715938145.exe 28 PID 1744 wrote to memory of 1220 1744 1c3353945453cc06d559600715938145.exe 28 PID 1744 wrote to memory of 1220 1744 1c3353945453cc06d559600715938145.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c3353945453cc06d559600715938145.exe"C:\Users\Admin\AppData\Local\Temp\1c3353945453cc06d559600715938145.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1744 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1744 -s 442⤵
- Program crash
PID:1220
-