Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 00:47

General

  • Target

    uninstall.exe

  • Size

    36KB

  • MD5

    dd46baf40ee3e2ef7db34dc1db730594

  • SHA1

    2aed07eea47e8e4f1d8b47ab710653e9b1a05359

  • SHA256

    d4485321081bd7bf6abc2b0ebf2dffb305cd6ce2ed2cbdd4383e20d5db9d4340

  • SHA512

    fb373bed87f54de7fa11f46643ba81e98e311d0adf87cdd49a97e3eb3816057bafd6af52e2df2c92753df7b199fef72442e9193d82342c390d2dce9958faebe4

  • SSDEEP

    768:04wO7XBz+5Qm3W0CYzpVyrMVru+129Gg4jjfS3XJHTDS:XLXB65939CY9VN29Gg4sXJHT2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\uninstall.exe
    "C:\Users\Admin\AppData\Local\Temp\uninstall.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1624
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 164
      2⤵
      • Program crash
      PID:1592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1624-0-0x0000000000403000-0x0000000000404000-memory.dmp
    Filesize

    4KB