Resubmissions
09/04/2024, 10:11
240409-l75m8scd58909/04/2024, 10:09
240409-l6vfwacd37909/04/2024, 10:09
240409-l6t54scd36909/04/2024, 10:09
240409-l6tjksff51913/03/2024, 02:34
240313-c2ncbsce2910Analysis
- max time kernel
117s - max time network
121s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
13/03/2024, 02:34
General
- Target 9eaab6282fb6588621de05823543a2077277b7ac9404193bfc77819083ad58e6.exe
- Size 39KB
- Sample240313-c2ncbsce29
- SHA256 9eaab6282fb6588621de05823543a2077277b7ac9404193bfc77819083ad58e6
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9eaab6282fb6588621de05823543a2077277b7ac9404193bfc77819083ad58e6.exe"C:\Users\Admin\AppData\Local\Temp\9eaab6282fb6588621de05823543a2077277b7ac9404193bfc77819083ad58e6.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1956 -s 6282⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1956-0-0x00000000009C0000-0x00000000009CE000-memory.dmp
memory/1956-1-0x000007FEF61F0000-0x000007FEF6BDC000-memory.dmp
memory/1956-2-0x000000001B490000-0x000000001B510000-memory.dmp
memory/1956-3-0x000007FEF61F0000-0x000007FEF6BDC000-memory.dmp
memory/1956-4-0x000000001B490000-0x000000001B510000-memory.dmp