e82ce38d84ef2cd91b21687f7f39f366c6441acbc99c126eb70407b525204631 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 20:01

Sharing

Report Analysis Logs

General

Target

c6bd38869e553faf9fb7eaaa1c332f2f.exe
Size

2.1MB
MD5

c6bd38869e553faf9fb7eaaa1c332f2f
SHA1

8f2361d0851a974c4ec28fc6c6307c8ff45eec8b
SHA256

e82ce38d84ef2cd91b21687f7f39f366c6441acbc99c126eb70407b525204631
SHA512

e2f4a993b683800e58d5957ff060f9c6721af0689c1515d71ea43739746ea17b1d5c32900b0c116c478509264ac5233c9497dd80a000efde3b0a965149f25b46
SSDEEP

49152:mTaZ3Idhz6jCMlgjGnOXs2qMDVciJa9eDeYC0i8:1azz6jVlg2QYEi9bi

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2476	2344	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 2476	2344	c6bd38869e553faf9fb7eaaa1c332f2f.exe	28
PID 2344 wrote to memory of 2476	2344	c6bd38869e553faf9fb7eaaa1c332f2f.exe	28
PID 2344 wrote to memory of 2476	2344	c6bd38869e553faf9fb7eaaa1c332f2f.exe	28
PID 2344 wrote to memory of 2476	2344	c6bd38869e553faf9fb7eaaa1c332f2f.exe	28

C:\Users\Admin\AppData\Local\Temp\c6bd38869e553faf9fb7eaaa1c332f2f.exe
"C:\Users\Admin\AppData\Local\Temp\c6bd38869e553faf9fb7eaaa1c332f2f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 88
  2⤵
  - Program crash
  PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads