55a34accf93ba5eb8cdc23a3aea07dc39893cd4cfea6b3515ab89c882d77b490 | Triage

Analysis

max time kernel
123s
max time network
148s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:26

Sharing

Report Analysis Logs

General

Target

37f244cb6505a3820ad2e2699b83c697.exe
Size

3KB
MD5

37f244cb6505a3820ad2e2699b83c697
SHA1

03d49ee996a9429d24b6afd211d55f561e761e2b
SHA256

55a34accf93ba5eb8cdc23a3aea07dc39893cd4cfea6b3515ab89c882d77b490
SHA512

c1a74b66e88297c9c85316f866623ad1f46f96a12d0c1310a2e5393b10b6bdd7aa323a12a534eff3c7f46be04c7f14c0032acecce322eb3677a8b6edf3f46611

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process
2292	2272	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2292	2272	37f244cb6505a3820ad2e2699b83c697.exe	16
PID 2272 wrote to memory of 2292	2272	37f244cb6505a3820ad2e2699b83c697.exe	16
PID 2272 wrote to memory of 2292	2272	37f244cb6505a3820ad2e2699b83c697.exe	16
PID 2272 wrote to memory of 2292	2272	37f244cb6505a3820ad2e2699b83c697.exe	16

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 36
1⤵
- Program crash
PID:2292

C:\Users\Admin\AppData\Local\Temp\37f244cb6505a3820ad2e2699b83c697.exe
"C:\Users\Admin\AppData\Local\Temp\37f244cb6505a3820ad2e2699b83c697.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads