9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 01:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe
Size

796KB
MD5

aad2945372e5ee110228db3817694d53
SHA1

dfda726a65e25151593be2c33b0657a17ba6e6ce
SHA256

9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b
SHA512

ce53b938c921f374a9d8889ec23a511e3d1211db1b538b4c4ec874c38bedef58bf8bc09c7a980869292bbaa1ff77bd53f16db27a1e6f0800366eae148244a1ee
SSDEEP

12288:mVn0bgMfMkLPrDosqkPtu0ejxYgbdkq6d6z/fKCvePVGDewKMaCu+o7KiY9L8j:i0bZvDosqkFuXj3qLdC8uBBa0WK39L8j

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4600	3028	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 4600	3028	9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe	29
PID 3028 wrote to memory of 4600	3028	9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe	29
PID 3028 wrote to memory of 4600	3028	9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe	29
PID 3028 wrote to memory of 4600	3028	9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe	29

C:\Users\Admin\AppData\Local\Temp\9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe
"C:\Users\Admin\AppData\Local\Temp\9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3028 -s 128
  2⤵
  - Program crash
  PID:4600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-0-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/3028-1-0x0000000076C80000-0x0000000076CC7000-memory.dmp

Filesize
284KB

Download
memory/3028-509-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-563-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-561-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-559-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-557-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-555-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-553-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-551-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-549-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-547-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-545-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-543-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-541-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-539-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-537-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-535-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-533-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-531-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-529-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-527-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-525-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-523-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-521-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-519-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-517-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-515-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-513-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-511-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-507-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-505-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-503-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download
memory/3028-502-0x0000000002410000-0x0000000002521000-memory.dmp

Filesize
1.1MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads