Overview

overview

3

Static

static

fc42a4eccb...5a.exe

windows7-x64

1

fc42a4eccb...5a.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    293s
  • max time network
    358s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 06:27 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc42a4eccbb9da456d2f492d6b77c0bedfdd247f40399775f9bd7bb7eb64fb5a.exe

  • Size

    44KB

  • MD5

    0222a07bb49463cfaaa8845d95dafbc4

  • SHA1

    208caef9b23c6c18110163f1c47b2d14ace67be1

  • SHA256

    fc42a4eccbb9da456d2f492d6b77c0bedfdd247f40399775f9bd7bb7eb64fb5a

  • SHA512

    feba572dd8788e85f29b599a36828c3bb4bfca7a8503f88a6f099d72363710fa79720088b7be62841326feb6601e35e4cb989d837279e4b719958758619f0b32

  • SSDEEP

    768:DMe3Vk9haLNFZ131W8g/XK1LjQdUbYANLsSN:DMASiLNFZdO/XsLjhYAl

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc42a4eccbb9da456d2f492d6b77c0bedfdd247f40399775f9bd7bb7eb64fb5a.exe
    "C:\Users\Admin\AppData\Local\Temp\fc42a4eccbb9da456d2f492d6b77c0bedfdd247f40399775f9bd7bb7eb64fb5a.exe"
    1⤵
      PID:4080
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4080 -s 392
        2⤵
        • Program crash
        PID:4564
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4080 -ip 4080
      1⤵
        PID:4040

      Network

      • flag-unknown
        DNS
        176.122.125.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        176.122.125.40.in-addr.arpa
        IN PTR
        Response
      • flag-unknown
        DNS
        a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        Remote address:
        8.8.8.8:53
        Request
        a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        IN PTR
        Response
      • 93.184.220.29:80
        322 B
         7
      • 209.197.3.8:80
        322 B
         7
      • 209.197.3.8:80
        322 B
         7
      • 209.197.3.8:80
        322 B
         7
      • 104.80.225.205:443
        322 B
         7
      • 8.8.8.8:53
        176.122.125.40.in-addr.arpa
        dns
        73 B
         159 B
         1
        1

        DNS Request

        176.122.125.40.in-addr.arpa

      • 8.8.8.8:53
        a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        dns
        118 B
         204 B
         1
        1

        DNS Request

        a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4080-132-0x0000000000400000-0x0000000000410000-memory.dmp

        Filesize

        64KB

        Download

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.