Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 17:49
Behavioral task
behavioral1
Sample
202405229179e572cfe0a9d2904b896606695cafstop.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
202405229179e572cfe0a9d2904b896606695cafstop.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
202405229179e572cfe0a9d2904b896606695cafstop.exe
-
Size
1.1MB
-
MD5
9179e572cfe0a9d2904b896606695caf
-
SHA1
7622ab65fe2573f002013a3071b4ce009297c4fd
-
SHA256
50e508ddd2290faa219656f9b9cc733ff5dcc1c5ec0c76000035eae20bf85310
-
SHA512
b5940eaf8504a8fcfe1f198dcd2e6910d3c2376a227a4aa0747b586074ada805a7dc8c37b3c6a255adc756e339ceeafc82debbe0486b6bde7c64da27251c388a
-
SSDEEP
24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/ERPOO86wHUq7:F0dwAYZt6C31WeTMRPOh6IUq7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1956 1964 WerFault.exe 202405229179e572cfe0a9d2904b896606695cafstop.exe -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
202405229179e572cfe0a9d2904b896606695cafstop.exedescription pid process target process PID 1964 wrote to memory of 1956 1964 202405229179e572cfe0a9d2904b896606695cafstop.exe WerFault.exe PID 1964 wrote to memory of 1956 1964 202405229179e572cfe0a9d2904b896606695cafstop.exe WerFault.exe PID 1964 wrote to memory of 1956 1964 202405229179e572cfe0a9d2904b896606695cafstop.exe WerFault.exe PID 1964 wrote to memory of 1956 1964 202405229179e572cfe0a9d2904b896606695cafstop.exe WerFault.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\202405229179e572cfe0a9d2904b896606695cafstop.exe"C:\Users\Admin\AppData\Local\Temp\202405229179e572cfe0a9d2904b896606695cafstop.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1964 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1964 -s 1922⤵
- Program crash
PID:1956