Overview
overview
10Static
static
301aa1629bc...16.exe
windows10-2004-x64
1010c3a4b3e3...62.exe
windows10-2004-x64
1012d321d9a6...0f.exe
windows10-2004-x64
102a2e3be04e...f7.exe
windows10-2004-x64
102bca03b9ef...e5.exe
windows10-2004-x64
102d2e176ff1...1c.exe
windows10-2004-x64
102d948afc82...ca.exe
windows10-2004-x64
102ec8f43232...da.exe
windows10-2004-x64
103a0ceb2aa8...f5.exe
windows10-2004-x64
103d5d854d7b...21.exe
windows10-2004-x64
1068ab5c7a84...5d.exe
windows10-2004-x64
107732b3137a...d8.exe
windows10-2004-x64
107c81a593c9...95.exe
windows7-x64
37c81a593c9...95.exe
windows10-2004-x64
108a74314c35...5a.exe
windows10-2004-x64
79b03895e9b...54.exe
windows7-x64
39b03895e9b...54.exe
windows10-2004-x64
10a777a11027...76.exe
windows10-2004-x64
10c0dad59a3b...fd.exe
windows10-2004-x64
10de0b656af4...69.exe
windows10-2004-x64
10e0c981a9f2...55.exe
windows10-2004-x64
10e5410c580a...b5.exe
windows7-x64
1e5410c580a...b5.exe
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 11:56
Static task
static1
Behavioral task
behavioral1
Sample
01aa1629bce01d1d882c10d835fa7765f2a247f51bcbf0d46b77b87362877916.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
10c3a4b3e37a803bd0aa6309c39158c1cdc781b3496a972f062f1fe958597862.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
12d321d9a66bfb909ca6ae3097f6aba39263be25c619d424b1dbefd373b20d0f.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral4
Sample
2a2e3be04e8391170c3a71e198b45f6e45c085dff086c4e7b09748919fbeaef7.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
2bca03b9ef1fd0076fbe6ffcb97d4378326e6bff7afa395802e5c93bf74f66e5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
2d2e176ff101b33e0adec2558415b76c1425ba9502c4b652c64b4751dd11181c.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
2d948afc82e00dd1f60cb24271d2c482bc87f04e3f42bcd4147a3e017a974dca.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
2ec8f4323279cbb3c829846c70e2e3b3f65d9d4591c18c17eb21dd76a257e0da.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
3a0ceb2aa80172e3223e5154bd251fc1909cd353262609fa6bfeeb684d7761f5.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral10
Sample
3d5d854d7b4667609b1a4eb70e50a6f99578a6ede0809793fc835cf2aebd7221.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
68ab5c7a84977eb7379341d29d2b10434cfd4ae30fb2276c4973f5fa55a7e85d.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
7732b3137a721cb543261e9c4ecb5c90b51aa6d810c2df0104df6b11e319dbd8.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
7c81a593c9a2d9ab34fc28f1c121a9133b5584f0f4893ce3b51f6d7fdc040495.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
7c81a593c9a2d9ab34fc28f1c121a9133b5584f0f4893ce3b51f6d7fdc040495.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
8a74314c35a7a341a4dec6d70e0d6801d49282a77f6ca44fee133e1d3ae7b45a.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe
Resource
win7-20240220-en
Behavioral task
behavioral17
Sample
9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
a777a11027afe934646141f176344a5c05c946b740bea45e9684b9a8b98f6676.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
c0dad59a3bf41db6ecf798e4bdcef76482de14c96e0a17733413f0a05a686cfd.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral20
Sample
de0b656af41759ffa8477cd8c387f71b8e3cbddbc718028139d53bc1c6b95d69.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
e0c981a9f27b4ad406731c3e41ec4ff1248e97b375aacc1a4489a8065a22ed55.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
e5410c580a81399010c4afd0cb43116c8c6e79ed10a16ace6ca24b1180f130b5.exe
Resource
win7-20240221-en
Behavioral task
behavioral23
Sample
e5410c580a81399010c4afd0cb43116c8c6e79ed10a16ace6ca24b1180f130b5.exe
Resource
win10v2004-20240426-en
General
-
Target
9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe
-
Size
1.2MB
-
MD5
01f57ffedc53094c3d382135edcf73c9
-
SHA1
07cb59a3e430fdbbc77d906910ab4fd105c9f449
-
SHA256
9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554
-
SHA512
73d4c5f23d3e00a6e508326cf892977844a6e3f20669c9f1afd770660a7f6ea31d9f08ed022284827d3d35b542a00233b0dec05e75545fdacca82f7f4eb225b1
-
SSDEEP
24576:U51heljsInpBxcyc40xvOGe2EayAJrG8EJ:UjjInpBxcyc40UBaRZr6
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2188 1856 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1856 wrote to memory of 2188 1856 9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe 28 PID 1856 wrote to memory of 2188 1856 9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe 28 PID 1856 wrote to memory of 2188 1856 9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe 28 PID 1856 wrote to memory of 2188 1856 9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe"C:\Users\Admin\AppData\Local\Temp\9b03895e9b8629528bbb718f6ceab16387b6aba3cfa7fd7750d1372e383a7554.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1856 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1856 -s 1162⤵
- Program crash
PID:2188
-