Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 10:41

General

  • Target

    fce250268eb13215574d27aa10f9f2af4cf4fbf872c733c81c2a6175eba4469b.exe

  • Size

    1.1MB

  • MD5

    b3d5c931f0a5d787c3dab13b3940bde2

  • SHA1

    4c0964d8b091f67769064d56f3e853e637e89dcf

  • SHA256

    fce250268eb13215574d27aa10f9f2af4cf4fbf872c733c81c2a6175eba4469b

  • SHA512

    f6e5f487cd6784743641d9307862a8c5f740847beeb3d1d55eb583e8d1117dd9fe5083e4c72978b092c29927fc18a93be0cfcbad9ab733be2aed20bbc09ba590

  • SSDEEP

    24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Q3kiu5K:CcaClSFlG4ZM7Q3M

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fce250268eb13215574d27aa10f9f2af4cf4fbf872c733c81c2a6175eba4469b.exe
    "C:\Users\Admin\AppData\Local\Temp\fce250268eb13215574d27aa10f9f2af4cf4fbf872c733c81c2a6175eba4469b.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1676 -s 220
      2⤵
      • Program crash
      PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads