Analysis
-
max time kernel
0s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 09:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10v2004-20240508-en
0 signatures
150 seconds
General
-
Target
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
-
Size
86KB
-
MD5
d213a75b1956398e4c36bcc2f93339bf
-
SHA1
6a2739cc0e67f5593c744fbcbc8f00f12eef9954
-
SHA256
ece75d080f94df4b3699389021337b1536cfed229d1325f09b03f0b0d6d85ab4
-
SHA512
d32ddaf4c6f8f8df6c390d683e6c039f3b0d8f35f68f690b28bf88b17caedf0e11abd3aeb2e46238d0cd0a91b2db095cca0782b4e27f04453ea4cb6db38f4dd7
-
SSDEEP
1536:LoreNTh3K49I3BbbHVlnOXrPBdfeISRAOl801AbcsqD95wSxdRf1:LoQTh6EMbb1lnOXrPXe7Yhq5Z9
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2368 wrote to memory of 2656 2368 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28 PID 2368 wrote to memory of 2656 2368 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28 PID 2368 wrote to memory of 2656 2368 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"C:\Users\Admin\AppData\Local\Temp\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2368 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2368 -s 6202⤵PID:2656
-