Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 14:56

General

  • Target

    2024-05-22_b3a54c807124693a34c7d91e0bf404db_stop.exe

  • Size

    1.1MB

  • MD5

    b3a54c807124693a34c7d91e0bf404db

  • SHA1

    2da9affe3ee965b83e48e8185980b9125c883c34

  • SHA256

    203acd525d935c2a58ea882ee8ebf6c8b1248c5c2f01869d5ef8701c29545a9b

  • SHA512

    f4198866ac7c301cb5e3254106b59aa3f9fb1ff11ebc1ed593d350c2e4ca77919ada3ea33dff966e644fea4de8eb59acc2932e2048313fbca406b75f808bf14e

  • SSDEEP

    24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/XRPOO8SYHUq7:F0dwAYZt6C31WeTfRPOhSwUq7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-22_b3a54c807124693a34c7d91e0bf404db_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-22_b3a54c807124693a34c7d91e0bf404db_stop.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2344
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 192
      2⤵
      • Program crash
      PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads