044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
01-06-2024 16:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe
Size

3.9MB
MD5

12fc8503d08ef3d14d075ac2269ccf4d
SHA1

eab2886e7dddc947fe044e9c0cdab0d1e0361c66
SHA256

044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44
SHA512

c21487472a1c3e67efa0f978a18298fc88ffb503a77ca80664785edf91c3ff4bb715b3e47c472ed40560f39dacd4837257ae0429a8f67e1e24066da29e2f431c
SSDEEP

98304:gv842pda6D+/PjlLOlZyQipV5PRJ6YZh6wrOvRH:ekOpplZhPr+

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4456 2932 WerFault.exe 044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe

pid	pid_target	process	target process
4456	2932	WerFault.exe	044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe

description	pid	process	target process
PID 2932 wrote to memory of 4456	2932	044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe	WerFault.exe
PID 2932 wrote to memory of 4456	2932	044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe	WerFault.exe
PID 2932 wrote to memory of 4456	2932	044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe	WerFault.exe
PID 2932 wrote to memory of 4456	2932	044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe
"C:\Users\Admin\AppData\Local\Temp\044549c0db7f2f175e1d707a658c6e4147e610913fb6be768105de1dc1ef3d44.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2932 -s 120
2⤵
- Program crash
PID:4456

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2932-0-0x0000000000400000-0x00000000007EE000-memory.dmp

Filesize
3.9MB

Download
memory/2932-1-0x0000000076500000-0x0000000076547000-memory.dmp

Filesize
284KB

Download
memory/2932-502-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-503-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-505-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-509-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-513-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-511-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-507-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-515-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-527-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-547-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-555-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-525-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-541-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-561-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-563-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-559-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-557-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-553-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-551-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-549-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-545-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-543-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-539-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-537-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-535-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-533-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-531-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-529-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-523-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-521-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-519-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download
memory/2932-517-0x00000000025A0000-0x00000000026B1000-memory.dmp

Filesize
1.1MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads