Overview

overview

3

Static

static

3

challange_...d2.exe

windows7-x64

1

challange_...d2.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    90s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/07/2023, 20:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    challange_Benign_6fa7bf9ef3749b161061eb925cf2565873076fb3386501604c646805930fe6d2.exe

  • Size

    85KB

  • MD5

    015703d6d040d29e61807d89c03bfae4

  • SHA1

    ccf9faeabcc110a251bfbc9f03a088de023f68bb

  • SHA256

    6fa7bf9ef3749b161061eb925cf2565873076fb3386501604c646805930fe6d2

  • SHA512

    bd68e6e8c70432c568866c6766fd0a3f564c4e20d9d37d0f6502467a879c81a1c9aa8ead2a6597c771d67b3c24bba081a463434ffd825e6fa169348a42b39110

  • SSDEEP

    768:SbGHi6YR7rJp9Oe7uyJo6DepXZYRhHr9aH3HRI:IAilR7rJp9O6bHr9aH3xI

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\challange_Benign_6fa7bf9ef3749b161061eb925cf2565873076fb3386501604c646805930fe6d2.exe
    "C:\Users\Admin\AppData\Local\Temp\challange_Benign_6fa7bf9ef3749b161061eb925cf2565873076fb3386501604c646805930fe6d2.exe"
    1⤵
      PID:1824
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1824 -s 220
        2⤵
        • Program crash
        PID:1412
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1824 -s 224
        2⤵
        • Program crash
        PID:1776
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1824 -ip 1824
      1⤵
        PID:1688
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1824 -ip 1824
        1⤵
          PID:3112

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/1824-133-0x0000000001000000-0x0000000001018000-memory.dmp

                Filesize

                96KB

                Download