Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 09:22

General

  • Target

    990de904312dada2db035b0789ae2889.exe

  • Size

    863KB

  • MD5

    990de904312dada2db035b0789ae2889

  • SHA1

    adb3bc92f6841e87b2a105ca8705366a0d3dc751

  • SHA256

    e5e12e3ac00f692c59806613ed5f522157048b9dd399ca0a2cb125627f8ae344

  • SHA512

    cef547896c3c065e360e7e7d1d4ff18778c7be6607ef438036061020933fb720bcbe7bf0084e92f9a6234027dec84ad0e1c92a126a532a42565304cb963f5c29

  • SSDEEP

    12288:dLB6Aibszwd8vGfGaCRUGCzk0OIgeObT7gqoyr7cociP6sHVI/k/lx9m5XRrj6aN:FBabsM8KGH7Co0OLeGrIocE5lArjPP

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe
    "C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2372 -s 268
      2⤵
      • Program crash
      PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2372-0-0x0000000001000000-0x00000000010DA000-memory.dmp

    Filesize

    872KB

  • memory/2372-1-0x00000000007A0000-0x000000000087A000-memory.dmp

    Filesize

    872KB

  • memory/2372-2-0x0000000001000000-0x00000000010DA000-memory.dmp

    Filesize

    872KB