Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 14:54

General

  • Target

    2024-05-22_a25735ebd53c137357746fdb54a9cd7c_stop.exe

  • Size

    1.1MB

  • MD5

    a25735ebd53c137357746fdb54a9cd7c

  • SHA1

    f3a86a7ce69f808251ccf26e8e4687f866db98bf

  • SHA256

    b5779af319fb770f5d6ad5b897f4448d160e68f6b05539eb05a02e27afc0db21

  • SHA512

    2225b9f97e36738cf0c3f77df848d80224a06eb36586ddd09d7823e59e56e10fbf6900772f1ca7a656c02f8d5c981b18e36481c0008a410d0f9c6159c4dbd95e

  • SSDEEP

    24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/nRPOO865HUq7:F0dwAYZt6C31WeTvRPOh6FUq7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-22_a25735ebd53c137357746fdb54a9cd7c_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-22_a25735ebd53c137357746fdb54a9cd7c_stop.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2272
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 192
      2⤵
      • Program crash
      PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads