7e10b538209da2adc350ec765ddab6b8dfe2be66ca67b0355645ff1099d04923 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 01:04

Sharing

Report Analysis Logs

General

Target

$0/browserseek.exe
Size

25KB
MD5

81dc7f487fa5bd89fb1ba7c2420f9f64
SHA1

aed6ea394a769696d7e35635934940401ded9574
SHA256

699cac60f8ced062cfb49dd2da3ce416e10c08372f25b9476cda60add1449480
SHA512

406d8a6054f47002bd28027079ec5adeb8082440cc7e4142e839f41c082c9ecdcff89259243952d3dd8fa0cd24d287d66155e4246a3b3d84fda41bc1243a9e0e
SSDEEP

768:Hgrkahnan6TYIFXja9DPmjGQcnvRB0aBal0:ArdhnanTIFXjIDPNQcv3ql0

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2152	2196	WerFault.exe	1

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 2152	2196	browserseek.exe	11
PID 2196 wrote to memory of 2152	2196	browserseek.exe	11
PID 2196 wrote to memory of 2152	2196	browserseek.exe	11
PID 2196 wrote to memory of 2152	2196	browserseek.exe	11

C:\Users\Admin\AppData\Local\Temp\$0\browserseek.exe
"C:\Users\Admin\AppData\Local\Temp\$0\browserseek.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2196 -s 48
  2⤵
  - Program crash
  PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads