Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 10:39

General

  • Target

    90b4308c60389dcdd4d1643a3498ba83edfb419e90085be12ad9c704bd727692.exe

  • Size

    1.1MB

  • MD5

    1e5119f638f241f9ae2e42b71ed70552

  • SHA1

    531086b60f1edf74d64eeec9042d49e7c2393e38

  • SHA256

    90b4308c60389dcdd4d1643a3498ba83edfb419e90085be12ad9c704bd727692

  • SHA512

    6880d84d7d98429baf1472798efc57970ddcaab4bf59c7ae836af02cb749f60b3005e2c9f9b02208580aa4c665f799f8e526f7836eae02333c404a839cf64b1d

  • SSDEEP

    24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Q8kiu5TM:acallSllG4ZM7Q8MK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90b4308c60389dcdd4d1643a3498ba83edfb419e90085be12ad9c704bd727692.exe
    "C:\Users\Admin\AppData\Local\Temp\90b4308c60389dcdd4d1643a3498ba83edfb419e90085be12ad9c704bd727692.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3008 -s 220
      2⤵
      • Program crash
      PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3008-0-0x0000000000400000-0x000000000055F000-memory.dmp

    Filesize

    1.4MB

  • memory/3008-1-0x0000000000400000-0x000000000055F000-memory.dmp

    Filesize

    1.4MB