Resubmissions

25-01-2024 18:00

240125-wlr55acce5 3

25-01-2024 17:55

240125-whmq8scbf3 10

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:55

General

  • Target

    75256c485cded57213f2bc9f1aaa155a.exe

  • Size

    93KB

  • MD5

    75256c485cded57213f2bc9f1aaa155a

  • SHA1

    93dafd4bb10ed07c01be84e5aa94d03bebd0bcac

  • SHA256

    708f68b143db773523d27ffeffed1384889a7b697cb34993d8c73959c619ffd0

  • SHA512

    a8a5a3451179c8dc7fabfb723885bfa546b3d4cfd7e25dcf8fc4930f7272621fef9e9bfe26c9bdec7a9754e68ddf9cd3d22257b81359d1cf8bbdb1d887af570c

  • SSDEEP

    1536:rDq935C9v7MP+NZlGjsE57dg144cLm8Y13LX/2U9cmPN3o6g:rDq93my0lGx57dg144clY1b+U9NN3oH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\75256c485cded57213f2bc9f1aaa155a.exe
    "C:\Users\Admin\AppData\Local\Temp\75256c485cded57213f2bc9f1aaa155a.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 36
      2⤵
      • Program crash
      PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads