Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 04:54

General

  • Target

    d83a62c5356fb7a16999a05be8dd8abe2cf80ec336c0d3fe17edf2d55094ee1b.exe

  • Size

    5KB

  • MD5

    536ecd614781129d1e349f541ca5c83f

  • SHA1

    f92a99a79d8e0b003ffd14c9b83d52d461b14745

  • SHA256

    d83a62c5356fb7a16999a05be8dd8abe2cf80ec336c0d3fe17edf2d55094ee1b

  • SHA512

    633b210df2e52c3335e6eb79e6855d1e4981b0baff5f4f84e6b9d4a08a8a4e293eddded8de4e88c1101bee0f891b9d6da91656dd075bb4951dffc17a7f2a511e

  • SSDEEP

    48:66sm8CLydQH9ti0TlDlwJzYSmIMua9CTZzNMMj3qj48YPnjcdpKmMGKVVq7lW5Gy:95h3G44zQ4jcdpMRVVCgEsupzNt

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d83a62c5356fb7a16999a05be8dd8abe2cf80ec336c0d3fe17edf2d55094ee1b.exe
    "C:\Users\Admin\AppData\Local\Temp\d83a62c5356fb7a16999a05be8dd8abe2cf80ec336c0d3fe17edf2d55094ee1b.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 548
      2⤵
      • Program crash
      PID:2872

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2188-0-0x000000007452E000-0x000000007452F000-memory.dmp

          Filesize

          4KB

        • memory/2188-1-0x0000000000A10000-0x0000000000A18000-memory.dmp

          Filesize

          32KB

        • memory/2188-2-0x000000007452E000-0x000000007452F000-memory.dmp

          Filesize

          4KB