deb538fe7b7534a808acece2756a79296ee82f81d4acb1d1697f099da5cee136 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28-01-2024 00:53

Sharing

Report Analysis Logs

General

Target

7bbaf207645c2e83d3538bbf79f01098.exe
Size

3.6MB
MD5

7bbaf207645c2e83d3538bbf79f01098
SHA1

92ba1c6b63fa7012230e37a69d05c336280af447
SHA256

deb538fe7b7534a808acece2756a79296ee82f81d4acb1d1697f099da5cee136
SHA512

825818695fa429cba13198265fd46337766c003eeb7762a41941a208808078820c1cd08192fc6427a58e5250bab0438b01a80915540c46d0e8353ce4b23f23cc
SSDEEP

49152:zAdGB73ejP3+EMfRdASVaAvrN5Xh602+s:zAgR3epMjASHPhK

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3016	2128	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 3016	2128	7bbaf207645c2e83d3538bbf79f01098.exe	29
PID 2128 wrote to memory of 3016	2128	7bbaf207645c2e83d3538bbf79f01098.exe	29
PID 2128 wrote to memory of 3016	2128	7bbaf207645c2e83d3538bbf79f01098.exe	29
PID 2128 wrote to memory of 3016	2128	7bbaf207645c2e83d3538bbf79f01098.exe	29

C:\Users\Admin\AppData\Local\Temp\7bbaf207645c2e83d3538bbf79f01098.exe
"C:\Users\Admin\AppData\Local\Temp\7bbaf207645c2e83d3538bbf79f01098.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 104
  2⤵
  - Program crash
  PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads