e566ee2189f830504af1cb787279111b7b2f3817a61a85bad8d9810701dd4877

Analysis

max time kernel
1558s
max time network
1560s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
16-07-2024 08:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe
Size

803KB
MD5

99885a3cd64212e5d210c9db4bcae5b1
SHA1

806d2c572e6b247a6d899ad4af840ecbf1f968f6
SHA256

537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba
SHA512

f6b5ad9d4bd9c797a1b27c6c078d2a605cd24be6fbcb30016a0b81d00081d6695b29b0ab4bc9e66438eb3769c51df9920d9da8d6260cbc45c52cfb140fea0ab0
SSDEEP

12288:bDCpAivL03RuebsXkA4uHP/LoyP2VNp6DHpeH+vJxbLWXKy1ypdQhjE+FwSoh:n2ghuebsYuHP/syP+WpeH+zLuBhQSoh

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4472	1040	WerFault.exe	29

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1040 wrote to memory of 4472	1040	537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe	30
PID 1040 wrote to memory of 4472	1040	537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe	30
PID 1040 wrote to memory of 4472	1040	537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe	30
PID 1040 wrote to memory of 4472	1040	537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe	30

C:\Users\Admin\AppData\Local\Temp\537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe
"C:\Users\Admin\AppData\Local\Temp\537a2fd4d214a212df06fb73b19ba945672eaf18d64cc30d8e99ab6a0d7cb9ba.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1040 -s 120
  2⤵
  - Program crash
  PID:4472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1040-0-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/1040-1-0x0000000075550000-0x0000000075597000-memory.dmp

Filesize
284KB

Download
memory/1040-502-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-503-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-505-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-507-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-513-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-517-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-515-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-511-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-509-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-519-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-521-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-545-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-523-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-525-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-531-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-541-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-549-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-563-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-561-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-560-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-557-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-555-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-553-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-551-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-547-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-543-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-540-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-537-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-535-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-533-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-529-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-527-0x0000000002130000-0x0000000002241000-memory.dmp

Filesize
1.1MB

Download
memory/1040-2238-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads