Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-03-2024 19:36

General

  • Target

    applecleaner.exe

  • Size

    11KB

  • MD5

    22e3095c8cf11dc93358b7d9fc4a52ed

  • SHA1

    77f41d9876aa2eabb64260281f9ae469c7e2f7fc

  • SHA256

    6751c45698a1ebc492e3b1900d96c618ac0cd2a80ca56d3ba974fdfe43431ace

  • SHA512

    6e812c89510d83ee673a98228aff2922aa125fc609240640f1980103305b1108fed10993caa017c390bff00fa68e8be4295d50fcdb65a04e4ade7227eb200d56

  • SSDEEP

    192:5N8JZBfYtfqkDUedD8tUhKIziFcfqg9uldFwE9wtgH6:5NiBAtfqk9d4tOKJCHEmmH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\applecleaner.exe
    "C:\Users\Admin\AppData\Local\Temp\applecleaner.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1896
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1896 -s 592
      2⤵
      • Program crash
      PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1896-0-0x00000000001E0000-0x00000000001EA000-memory.dmp

    Filesize

    40KB

  • memory/1896-1-0x0000000074230000-0x000000007491E000-memory.dmp

    Filesize

    6.9MB

  • memory/1896-2-0x0000000000200000-0x000000000021A000-memory.dmp

    Filesize

    104KB

  • memory/1896-3-0x0000000000230000-0x000000000023A000-memory.dmp

    Filesize

    40KB

  • memory/1896-4-0x0000000000310000-0x0000000000350000-memory.dmp

    Filesize

    256KB

  • memory/1896-5-0x0000000074230000-0x000000007491E000-memory.dmp

    Filesize

    6.9MB

  • memory/1896-6-0x0000000000310000-0x0000000000350000-memory.dmp

    Filesize

    256KB