Overview

overview

3

Static

static

1

Setup.exe

windows7-x64

1

Setup.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2023, 14:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Setup.exe

  • Size

    1.5MB

  • MD5

    f6b4a8962cc585e6b65c3ad0d0bcf398

  • SHA1

    81fd9655a608bd0fc464234794b0e781e62df0d7

  • SHA256

    3a6e3f68752ee8c5fa7d30258933483662515190e5e199e8fbe1bd7ce96aded7

  • SHA512

    66012b73844bd4ceed6c14f489ab132917cf81b542d264db3de950ea2f3bc0e132800fc243c173ec5c4f259d7beb5d013c265b1d770f10c1dafab0f0262a9cf1

  • SSDEEP

    24576:hXZNrGaUmA0DWE+wMDOxUI4j0aOBt+YzPoX7DjH:hXZNiaLWE+VDcZuPOhPoL3H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:4240
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 608
      2⤵
      • Program crash
      PID:1672
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4240 -ip 4240
    1⤵
      PID:3816

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4240-136-0x0000000001050000-0x0000000001051000-memory.dmp

            Filesize

            4KB

            Download