a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
submitted
29-07-2024 17:25

Sharing

Report Analysis Logs

General

Target

Major_0x00012BD4C3BDF0(1).exe
Size

1.3MB
MD5

c7ea74a05e864d4d67a2fba6be3bb667
SHA1

be91a12de06e01a7e10b1dd514dbedb699f180e4
SHA256

a01ac4244102e3958296c70d71e3d951f11abcc355458d1918d081587b151d90
SHA512

ad03970be59ae08deaf69ffe3078704f9471a76789c040d695a21ab4ffd95377137ab64f19e33f6d9a9fa1b4ec11bd1c66b4a5bbc55dc413cd79aa6376b6a713
SSDEEP

24576:fWljizSawkL2zmeaAit8v1hUw+hqPNKLkFh:+l2akSz+AitK5EAF

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 588 wrote to memory of 2564	588	Major_0x00012BD4C3BDF0(1).exe	31
PID 588 wrote to memory of 2564	588	Major_0x00012BD4C3BDF0(1).exe	31
PID 588 wrote to memory of 2564	588	Major_0x00012BD4C3BDF0(1).exe	31

C:\Users\Admin\AppData\Local\Temp\Major_0x00012BD4C3BDF0(1).exe
"C:\Users\Admin\AppData\Local\Temp\Major_0x00012BD4C3BDF0(1).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:588
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 588 -s 264
  2⤵
  PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads