Overview

overview

10

Static

static

2ccab40561...59.exe

windows7-x64

10

2ccab40561...59.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    86s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 17:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2ccab4056132f33056a961e10471fa8c2d77a57f3fbd156d2da5fc4237c5ff59.exe

  • Size

    468KB

  • MD5

    2039dd3b22bf4b7f4cd8c7881a3f9f6f

  • SHA1

    9998669640458f7572c173a7b6e50cdafa3f8d44

  • SHA256

    2ccab4056132f33056a961e10471fa8c2d77a57f3fbd156d2da5fc4237c5ff59

  • SHA512

    1a4631a8335368cc8cec2a629d333f979a19fc77c0b5415da6564473629c94d8e2cad19698146c60677bd5a1266cc29e5d96c1038439b900b6812e0298bffaf7

  • SSDEEP

    12288:JHRgaKaydSIzOg7W1rqipqlJPqrcUeS3vA60W:J2rawSJg7IRpqOs

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ccab4056132f33056a961e10471fa8c2d77a57f3fbd156d2da5fc4237c5ff59.exe
    "C:\Users\Admin\AppData\Local\Temp\2ccab4056132f33056a961e10471fa8c2d77a57f3fbd156d2da5fc4237c5ff59.exe"
    1⤵
      PID:4788
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 520
        2⤵
        • Program crash
        PID:3696
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 540
        2⤵
        • Program crash
        PID:5068
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4788 -ip 4788
      1⤵
        PID:2584
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4788 -ip 4788
        1⤵
          PID:4608

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4788-132-0x0000000000410000-0x00000000004D8000-memory.dmp

          Filesize

          800KB

          Download