9e8ba783a127bc7bcd386673131e370b1fcd5367d28a002e244b0094c0bd7b5a | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
01/03/2025, 14:00

Sharing

Report Analysis Logs

General

Target

mmmmm.exe
Size

650KB
MD5

0ec384b7321f9f1541c1bc606174ece0
SHA1

50a80a859e24aebe6dfc4d0b87fee07874b41bd0
SHA256

9e8ba783a127bc7bcd386673131e370b1fcd5367d28a002e244b0094c0bd7b5a
SHA512

3365865fb6c56f3ba12c7366afad8dd68af859c3886a3e7c589eaa6b6725cc7423106dc4f64a2e56e7e248004faf05dc0b99baaed01e739a1ed9bf01bbf6bcee
SSDEEP

12288:oCBUW9ge15I4ScpG1Im6wPeVdtNuxjAYVUWAJ:oCBUKd5Pp6QwP6jw

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 2384	2340	mmmmm.exe	30
PID 2340 wrote to memory of 2384	2340	mmmmm.exe	30
PID 2340 wrote to memory of 2384	2340	mmmmm.exe	30

C:\Users\Admin\AppData\Local\Temp\mmmmm.exe
"C:\Users\Admin\AppData\Local\Temp\mmmmm.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2340
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2340 -s 608
  2⤵
  PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2340-0-0x000007FEF57F3000-0x000007FEF57F4000-memory.dmp

Filesize
4KB

Download
memory/2340-1-0x0000000000800000-0x00000000008A8000-memory.dmp

Filesize
672KB

Download
memory/2340-2-0x000007FEF57F0000-0x000007FEF61DC000-memory.dmp

Filesize
9.9MB

Download
memory/2340-3-0x000007FEF57F0000-0x000007FEF61DC000-memory.dmp

Filesize
9.9MB

Download