Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19-02-2024 01:28

General

  • Target

    bffe0f9b1bfb77ad0625085693d36c0a518587fcc2d1f0c8befe500a212e07bb.exe

  • Size

    142.5MB

  • MD5

    e5dafbc05b5dff45255667690fe74243

  • SHA1

    4fb54d3f33757c054b1097951952f4627c44e0d2

  • SHA256

    bffe0f9b1bfb77ad0625085693d36c0a518587fcc2d1f0c8befe500a212e07bb

  • SHA512

    939fe8340565238c56d581f3a953d160b42f2a59bf665107961269d5f4e5305432efc29024b3b1057c01e16869ded65c0193496a5c728d9f7159127fbf1646b6

  • SSDEEP

    786432:Shpp4LggapMr7WN3KPqiVtAnnFWZEjdmXNDGY6zZyBdTtLwSTRpf4P1wT1M9t0J:ShD4LggF3TVGnBJm9pkcEtI

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bffe0f9b1bfb77ad0625085693d36c0a518587fcc2d1f0c8befe500a212e07bb.exe
    "C:\Users\Admin\AppData\Local\Temp\bffe0f9b1bfb77ad0625085693d36c0a518587fcc2d1f0c8befe500a212e07bb.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2364 -s 1356
      2⤵
        PID:2392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2364-0-0x0000000180000000-0x0000000180A25000-memory.dmp

      Filesize

      10.1MB

    • memory/2364-4-0x000000013FCD0000-0x000000014063E000-memory.dmp

      Filesize

      9.4MB

    • memory/2364-3-0x0000000023F00000-0x0000000024BB1000-memory.dmp

      Filesize

      12.7MB

    • memory/2364-10-0x0000000022DF0000-0x0000000022EB1000-memory.dmp

      Filesize

      772KB

    • memory/2364-7-0x0000000001CA0000-0x0000000001CB2000-memory.dmp

      Filesize

      72KB

    • memory/2364-13-0x00000000003D0000-0x00000000003DD000-memory.dmp

      Filesize

      52KB

    • memory/2364-16-0x0000000001F70000-0x0000000001F90000-memory.dmp

      Filesize

      128KB

    • memory/2364-22-0x0000000002070000-0x0000000002083000-memory.dmp

      Filesize

      76KB

    • memory/2364-19-0x0000000001F90000-0x0000000001FA8000-memory.dmp

      Filesize

      96KB

    • memory/2364-31-0x0000000022D20000-0x0000000022D60000-memory.dmp

      Filesize

      256KB

    • memory/2364-28-0x0000000002090000-0x00000000020B1000-memory.dmp

      Filesize

      132KB

    • memory/2364-34-0x0000000023350000-0x000000002344E000-memory.dmp

      Filesize

      1016KB

    • memory/2364-37-0x0000000002040000-0x0000000002047000-memory.dmp

      Filesize

      28KB

    • memory/2364-40-0x0000000001F60000-0x0000000001F6A000-memory.dmp

      Filesize

      40KB

    • memory/2364-43-0x0000000022D60000-0x0000000022D8A000-memory.dmp

      Filesize

      168KB

    • memory/2364-49-0x0000000022B80000-0x0000000022B96000-memory.dmp

      Filesize

      88KB

    • memory/2364-52-0x0000000022F10000-0x0000000022F4C000-memory.dmp

      Filesize

      240KB

    • memory/2364-46-0x0000000022EC0000-0x0000000022F0E000-memory.dmp

      Filesize

      312KB

    • memory/2364-55-0x0000000022DC0000-0x0000000022DD9000-memory.dmp

      Filesize

      100KB

    • memory/2364-61-0x0000000027750000-0x0000000027805000-memory.dmp

      Filesize

      724KB

    • memory/2364-58-0x0000000023DC0000-0x0000000023E43000-memory.dmp

      Filesize

      524KB

    • memory/2364-64-0x0000000022DE0000-0x0000000022DE7000-memory.dmp

      Filesize

      28KB

    • memory/2364-67-0x0000000023540000-0x0000000023576000-memory.dmp

      Filesize

      216KB

    • memory/2364-144-0x000000013FCD0000-0x000000014063E000-memory.dmp

      Filesize

      9.4MB