a29158eb8d65435a7f87236ded4e06cc5a53887f53bb4d8b6684350d636d2e00 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 02:37

Sharing

Report Analysis Logs

General

Target

bin/Benchmark.DirectX9.Black.White.exe
Size

13KB
MD5

cd5d956992b52bbd7cf9211475cd4586
SHA1

eec4ea3ab71711080f40bc1b3995f1f05d5a8631
SHA256

cb0fdad6085a99549275d9101bcf257b1b5a23099a9d2ba1b766cc4481927aec
SHA512

e71cf38f8ecc606ed37740af1223d245c2138fa9b8178f59dbce540b53cd87585c73be3d824f3bcf6929b1f9774b1eed029fe6016080ead290dac01df1784aed
SSDEEP

192:Roqziw4c2QKb4AFMreWUtyKhihdgqiaau3Q5tfkcD:Ko4c2QKb4VrJUt60i93

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Benchmark.DirectX9.Black.White.exe

description	pid	process	target process
PID 1724 wrote to memory of 2240	1724	Benchmark.DirectX9.Black.White.exe	WerFault.exe
PID 1724 wrote to memory of 2240	1724	Benchmark.DirectX9.Black.White.exe	WerFault.exe
PID 1724 wrote to memory of 2240	1724	Benchmark.DirectX9.Black.White.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\bin\Benchmark.DirectX9.Black.White.exe
"C:\Users\Admin\AppData\Local\Temp\bin\Benchmark.DirectX9.Black.White.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1724

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1724 -s 268
2⤵
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads