e90927387fc9deaa8948c9745b3add4d0ba3c4bbe9e23eef758ae31c3484570a | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 21:04

Sharing

Report Analysis Logs

General

Target

7b46cc12c35c519091a6f52edb46703d.exe
Size

21KB
MD5

7b46cc12c35c519091a6f52edb46703d
SHA1

a5eff537dc5ced0fdb13999d25183b60c476e722
SHA256

e90927387fc9deaa8948c9745b3add4d0ba3c4bbe9e23eef758ae31c3484570a
SHA512

bbe529beb48666c213669838868a41143d3cd3089d8b7d5628420e904b2d2b5e3f9c359d3a34180666d965591226bf6baf78372676225ac1bd7f60e9adf011b2
SSDEEP

384:gX+KSBCmBlJtKtdXJUAMKMN9+zUJJBD/3Q9oQNjpkaz:ZKWb4Oj32oURz

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1548	2196	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 1548	2196	7b46cc12c35c519091a6f52edb46703d.exe	28
PID 2196 wrote to memory of 1548	2196	7b46cc12c35c519091a6f52edb46703d.exe	28
PID 2196 wrote to memory of 1548	2196	7b46cc12c35c519091a6f52edb46703d.exe	28
PID 2196 wrote to memory of 1548	2196	7b46cc12c35c519091a6f52edb46703d.exe	28

C:\Users\Admin\AppData\Local\Temp\7b46cc12c35c519091a6f52edb46703d.exe
"C:\Users\Admin\AppData\Local\Temp\7b46cc12c35c519091a6f52edb46703d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2196 -s 36
  2⤵
  - Program crash
  PID:1548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads