Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13-02-2024 09:22
Static task
static1
Behavioral task
behavioral1
Sample
990de904312dada2db035b0789ae2889.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
990de904312dada2db035b0789ae2889.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
990de904312dada2db035b0789ae2889.exe
-
Size
863KB
-
MD5
990de904312dada2db035b0789ae2889
-
SHA1
adb3bc92f6841e87b2a105ca8705366a0d3dc751
-
SHA256
e5e12e3ac00f692c59806613ed5f522157048b9dd399ca0a2cb125627f8ae344
-
SHA512
cef547896c3c065e360e7e7d1d4ff18778c7be6607ef438036061020933fb720bcbe7bf0084e92f9a6234027dec84ad0e1c92a126a532a42565304cb963f5c29
-
SSDEEP
12288:dLB6Aibszwd8vGfGaCRUGCzk0OIgeObT7gqoyr7cociP6sHVI/k/lx9m5XRrj6aN:FBabsM8KGH7Co0OLeGrIocE5lArjPP
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2340 2372 WerFault.exe 23 -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28 PID 2372 wrote to memory of 2340 2372 990de904312dada2db035b0789ae2889.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe"C:\Users\Admin\AppData\Local\Temp\990de904312dada2db035b0789ae2889.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2372 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2372 -s 2682⤵
- Program crash
PID:2340
-