Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 18:50
Behavioral task
behavioral1
Sample
2024052273c547151ae35d7272776e2a54d1e6a7stop.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024052273c547151ae35d7272776e2a54d1e6a7stop.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
2024052273c547151ae35d7272776e2a54d1e6a7stop.exe
-
Size
1.1MB
-
MD5
73c547151ae35d7272776e2a54d1e6a7
-
SHA1
461f38432c55cc54a9db9ac26655806955422216
-
SHA256
ad734502ed4e9c4040bc71f99d4d204ffc6620dd2574f4d4895c0f6ca2a59bad
-
SHA512
03bf0176fbf72faecfb08bb6b17b3f0c1bc6422fd00bc89ac065525c6f18dd5abd2ca3bcbe89caccdf0fe2c824084f0de1af75cd26a9b12ddcd7a6348d6110b3
-
SSDEEP
24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/XRPOO86JHUq7:F0dwAYZt6C31WeTPRPOh6VUq7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2872 2164 WerFault.exe 2024052273c547151ae35d7272776e2a54d1e6a7stop.exe -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
2024052273c547151ae35d7272776e2a54d1e6a7stop.exedescription pid process target process PID 2164 wrote to memory of 2872 2164 2024052273c547151ae35d7272776e2a54d1e6a7stop.exe WerFault.exe PID 2164 wrote to memory of 2872 2164 2024052273c547151ae35d7272776e2a54d1e6a7stop.exe WerFault.exe PID 2164 wrote to memory of 2872 2164 2024052273c547151ae35d7272776e2a54d1e6a7stop.exe WerFault.exe PID 2164 wrote to memory of 2872 2164 2024052273c547151ae35d7272776e2a54d1e6a7stop.exe WerFault.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024052273c547151ae35d7272776e2a54d1e6a7stop.exe"C:\Users\Admin\AppData\Local\Temp\2024052273c547151ae35d7272776e2a54d1e6a7stop.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2164 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2164 -s 1922⤵
- Program crash
PID:2872