Overview

overview

5

Static

static

3

e91bc4368b...ef.exe

windows7-x64

5

e91bc4368b...ef.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 16:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef.exe

  • Size

    400KB

  • MD5

    15307187640189d1a952ef1f335df2ec

  • SHA1

    84d8b596ec3b2cc18c933b42091cdcbb7b6d6491

  • SHA256

    e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef

  • SHA512

    0d4dec6cf9386a0936d606d861274e0d3042a2e08a523d14a5868cdd3a708bb158389206ac32ed0b939ef949a35315dfcec2a22ab8d8b561a984548c8edfc94f

  • SSDEEP

    12288:4uPdR1+ZUd6UTfR/yqw5ThA9BgnBiclhLKe:4uP3YVYlxw5ThAPgnEU

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef.exe
    "C:\Users\Admin\AppData\Local\Temp\e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:5008
    • C:\Users\Admin\AppData\Local\Temp\e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef.exe
      "C:\Users\Admin\AppData\Local\Temp\e91bc4368bee3c37acddcf171819938c589eb063fe1d03af074fed50a1e95bef.exe"
      2⤵
        PID:1908
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 1908 -s 80
          3⤵
          • Program crash
          PID:2284
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1908 -ip 1908
      1⤵
        PID:3948

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/5008-0-0x0000000000720000-0x000000000078A000-memory.dmp

              Filesize

              424KB

              Download

            • memory/5008-1-0x0000000074CB0000-0x0000000075460000-memory.dmp

              Filesize

              7.7MB

              Download

            • memory/5008-2-0x0000000005260000-0x0000000005270000-memory.dmp

              Filesize

              64KB

              Download

            • memory/5008-3-0x00000000050E0000-0x00000000050E1000-memory.dmp

              Filesize

              4KB

              Download

            • memory/5008-5-0x0000000074CB0000-0x0000000075460000-memory.dmp

              Filesize

              7.7MB

              Download