Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06-03-2024 19:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TraceCleaner.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
TraceCleaner.exe
-
Size
11KB
-
MD5
33fbca8dc3230e2c0c36678c787a63d8
-
SHA1
e5827fdc5262df48ab53d766a74f2a700cb6b049
-
SHA256
109b359176e064a3b40100491fbd3217a9a0b7027fd2fee05c5930a2df06770c
-
SHA512
299a4148337f46c32df4837bcf8dfa2d9984c1b174aec8052e8fd4d7b823b7a50f8f5c990f436578ed7f73a16cf77cced465262b22281d78fd53db0ef89cc6e0
-
SSDEEP
192:5x8JZ+SbRcum8HKH0BGEPEwzsrogKym+MKNA5jKmo:5xi+K88u0BGEsJogKyHMqAJKm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2992 2980 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2980 wrote to memory of 2992 2980 TraceCleaner.exe 28 PID 2980 wrote to memory of 2992 2980 TraceCleaner.exe 28 PID 2980 wrote to memory of 2992 2980 TraceCleaner.exe 28 PID 2980 wrote to memory of 2992 2980 TraceCleaner.exe 28