Resubmissions
15/05/2024, 13:04
240515-qaxzcaaf5w09/04/2024, 15:48
240409-s85g7abd29909/04/2024, 15:36
240409-s186eaba76909/04/2024, 15:19
240409-sp9ykadh91909/04/2024, 14:52
240409-r8xlxadc61909/04/2024, 14:39
240409-r1e2wsda5w9Analysis
- max time kernel
121s - max time network
130s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
- submitted
09/04/2024, 15:36
General
- Target WaveTrial/CefSharp.BrowserSubprocess.exe
- Size 6KB
- Sample240409-s186eaba76
- SHA256 95dd31f11ac1317559b6eee0479739930d503a4938283f5d831ac8add92ad792
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WaveTrial\CefSharp.BrowserSubprocess.exe"C:\Users\Admin\AppData\Local\Temp\WaveTrial\CefSharp.BrowserSubprocess.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1876 -s 5242⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1876-0-0x000000013FAA0000-0x000000013FAA6000-memory.dmp
memory/1876-1-0x00000000009D0000-0x0000000000A1A000-memory.dmp
memory/1876-3-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp
memory/1876-2-0x000000001C930000-0x000000001CA4E000-memory.dmp
memory/1876-4-0x000000001CA50000-0x000000001DA50000-memory.dmp
memory/1876-5-0x000007FEF5D50000-0x000007FEF673C000-memory.dmp