Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 06:44

General

  • Target

    bdb66a140c48fe2c348597a82bd6e6c8ce3a3cb7157ee552260f117a0e70aaa5N.exe

  • Size

    157KB

  • MD5

    efa2a43a6537ad97fddbad8ad6d53e50

  • SHA1

    cef112037f866bf5af7e0bbd5743165ebafc9924

  • SHA256

    bdb66a140c48fe2c348597a82bd6e6c8ce3a3cb7157ee552260f117a0e70aaa5

  • SHA512

    17fd78fcb319013491998ce8109477d27e8a470b18497afbe2d36a66c14ee20aed0539f9234e57ef1a2e3a270b2742e1702b168fa368b1c5e047f8ae3890f75c

  • SSDEEP

    3072:TloraCO+VqTl9CWpSmre/wKAnxRHowIIJXQ8utlaDUSzty9TeCFj:pJ+6lrLdPRHo7IYt8DUSwxeCF

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdb66a140c48fe2c348597a82bd6e6c8ce3a3cb7157ee552260f117a0e70aaa5N.exe
    "C:\Users\Admin\AppData\Local\Temp\bdb66a140c48fe2c348597a82bd6e6c8ce3a3cb7157ee552260f117a0e70aaa5N.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2856 -s 496
      2⤵
        PID:2800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2856-0-0x000007FEF5DB3000-0x000007FEF5DB4000-memory.dmp

      Filesize

      4KB

    • memory/2856-1-0x0000000000D90000-0x0000000000DBE000-memory.dmp

      Filesize

      184KB

    • memory/2856-2-0x000007FEF5DB3000-0x000007FEF5DB4000-memory.dmp

      Filesize

      4KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.