4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/05/2024, 01:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe
Size

28.2MB
MD5

29dc8180f10ea4a8333c75ca13d89b01
SHA1

65bbaf371e659557ca492a5538ff1f3f7c9c5e0d
SHA256

4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810
SHA512

9d46856e316dfe1380764496da6d8334d059c6368c204ce472f30ef23cd53143df7e000058da6b73ed2569ff665c8ec2c64f643d0eb657118075e1f852bc0383
SSDEEP

786432:VofOiEX3ihOwHbyK6IFnSksNhz/PoXOqyQ:VTSh7HbyKFNsPTPGyQ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5152	2984	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2984 wrote to memory of 5152	2984	4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe	28
PID 2984 wrote to memory of 5152	2984	4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe	28
PID 2984 wrote to memory of 5152	2984	4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe	28
PID 2984 wrote to memory of 5152	2984	4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe	28

C:\Users\Admin\AppData\Local\Temp\4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe
"C:\Users\Admin\AppData\Local\Temp\4e8b21d9ef64d249e0e98b777b44120a28a88e33f37fe6b827aefb3e6d093810.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 120
  2⤵
  - Program crash
  PID:5152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2984-0-0x0000000000400000-0x0000000002036000-memory.dmp

Filesize
28.2MB

Download
memory/2984-1-0x00000000757E0000-0x0000000075827000-memory.dmp

Filesize
284KB

Download
memory/2984-523-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-535-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-549-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-561-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-502-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-503-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-505-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-507-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-509-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-563-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-559-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-557-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-555-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-553-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-551-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-547-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-545-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-543-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-541-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-539-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-537-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-533-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-531-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-529-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-527-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-525-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-521-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-519-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-517-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-515-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-513-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download
memory/2984-511-0x0000000003E60000-0x0000000003F71000-memory.dmp

Filesize
1.1MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads