4cef3c81fa67acc3e547fb1b559a01d085bbe8655085df3d42e689101fc4a69d | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 01:16

Sharing

Report Analysis Logs

General

Target

22acd4c175b42cd39a62aa76f6217b58.exe
Size

271KB
MD5

22acd4c175b42cd39a62aa76f6217b58
SHA1

35dcc63441f92f6f611f427148efafad41b0125f
SHA256

4cef3c81fa67acc3e547fb1b559a01d085bbe8655085df3d42e689101fc4a69d
SHA512

e6c5c535ca77a243f6b3c41dadc3caab8761e2afe34861385ea9aa1f909cdd94fbd7179d8067b880c8727c10b187664a94ad52ac75ad610e6b03244da98bd172
SSDEEP

6144:Fch1humWvAouRt5dm4F87/YN6y9AlpaGtTBtSbg:Fch1humWFuRtmI8bYFGtTl

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2272	1756	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1756 wrote to memory of 2272	1756	22acd4c175b42cd39a62aa76f6217b58.exe	28
PID 1756 wrote to memory of 2272	1756	22acd4c175b42cd39a62aa76f6217b58.exe	28
PID 1756 wrote to memory of 2272	1756	22acd4c175b42cd39a62aa76f6217b58.exe	28
PID 1756 wrote to memory of 2272	1756	22acd4c175b42cd39a62aa76f6217b58.exe	28

C:\Users\Admin\AppData\Local\Temp\22acd4c175b42cd39a62aa76f6217b58.exe
"C:\Users\Admin\AppData\Local\Temp\22acd4c175b42cd39a62aa76f6217b58.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1756
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 88
  2⤵
  - Program crash
  PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads