Overview

overview

3

Static

static

244838bdba...bb.exe

windows7-x64

1

244838bdba...bb.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    188s
  • max time network
    195s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 06:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    244838bdbae5fe591a4cde935067c6b4ca8f55bc5ee1a8508b3f3370b12133bb.exe

  • Size

    197KB

  • MD5

    dff7a697f4148d79f59686120bd34646

  • SHA1

    f50e86f7b6f16492b5d4b26f70a1bb5021749edd

  • SHA256

    244838bdbae5fe591a4cde935067c6b4ca8f55bc5ee1a8508b3f3370b12133bb

  • SHA512

    736909a5d2ff059ab7dd632212b7693ca0e9cac1f1ba98b43aba9c1d2739db44fcdfb48340cbfc85f11b9f70efdb3ee136bc3f95163066444513fe7ea282455c

  • SSDEEP

    6144:0ruy3szi8SWns8k78jIA/NoPKBUUhHc1+P2:0r5Y7jc+AK2UoG2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\244838bdbae5fe591a4cde935067c6b4ca8f55bc5ee1a8508b3f3370b12133bb.exe
    "C:\Users\Admin\AppData\Local\Temp\244838bdbae5fe591a4cde935067c6b4ca8f55bc5ee1a8508b3f3370b12133bb.exe"
    1⤵
      PID:224
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 224 -s 476
        2⤵
        • Program crash
        PID:3680
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 224 -ip 224
      1⤵
        PID:1872

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/224-132-0x0000000001000000-0x0000000001074000-memory.dmp

              Filesize

              464KB

              Download