77f853548d034089a74dd09109997701581ce73754035dedb9a74aa8cb67c059 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25-02-2024 17:43

Sharing

Report Analysis Logs

General

Target

a4654c8c982168dac7967ce401f2f100.exe
Size

88KB
MD5

a4654c8c982168dac7967ce401f2f100
SHA1

c9e0028f54d35ca9ce011acf8f1ce405dc6f0b55
SHA256

77f853548d034089a74dd09109997701581ce73754035dedb9a74aa8cb67c059
SHA512

73389de57b9e181ce58152dd42ba5d7aeb7324918f8ffe9ad0efd152215d700b5c581cead66b6619b5504e2b3eeaa41a6c48d3ddec2a90acc87438c9f4b29a29
SSDEEP

1536:AoQIKo6iHk1t7qaeJdb3rydGs+af7f6QEiRvbl9lr:ANIKUytWaKb33glblv

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2444	2716	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2716 wrote to memory of 2444	2716	a4654c8c982168dac7967ce401f2f100.exe	28
PID 2716 wrote to memory of 2444	2716	a4654c8c982168dac7967ce401f2f100.exe	28
PID 2716 wrote to memory of 2444	2716	a4654c8c982168dac7967ce401f2f100.exe	28
PID 2716 wrote to memory of 2444	2716	a4654c8c982168dac7967ce401f2f100.exe	28

C:\Users\Admin\AppData\Local\Temp\a4654c8c982168dac7967ce401f2f100.exe
"C:\Users\Admin\AppData\Local\Temp\a4654c8c982168dac7967ce401f2f100.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2716
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2716 -s 88
  2⤵
  - Program crash
  PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads