Overview

overview

3

Static

static

3

599ec771a0...de.exe

windows7-x64

3

599ec771a0...de.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/08/2023, 08:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    599ec771a03e4aef8ec115e37ffa6f029c886b9edb6b6c6934106a54b160e6de.exe

  • Size

    4.6MB

  • MD5

    2dd61dc4dc6bdcd25976375fe789bf99

  • SHA1

    a7c4dde3a60439d7598a1de0e551e461928c6d10

  • SHA256

    599ec771a03e4aef8ec115e37ffa6f029c886b9edb6b6c6934106a54b160e6de

  • SHA512

    ddd668f6bb54194fae194ce46e82edbf4bd5dd77d76716899a97b3915cde94b0d36be60dd2e377c5d5b12b8a4713f693b47ea5a8cbbe8904458bbeb9cfc8ec01

  • SSDEEP

    24576:CTQ+SejCvQ9/9NjEOSjiR6x44cGHvFN4RTIZ99Bg/:UcOIx4FlsM

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\599ec771a03e4aef8ec115e37ffa6f029c886b9edb6b6c6934106a54b160e6de.exe
    "C:\Users\Admin\AppData\Local\Temp\599ec771a03e4aef8ec115e37ffa6f029c886b9edb6b6c6934106a54b160e6de.exe"
    1⤵
      PID:228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 228 -s 220
        2⤵
        • Program crash
        PID:1928
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 228 -s 224
        2⤵
        • Program crash
        PID:2256
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 228 -ip 228
      1⤵
        PID:2008
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 228 -ip 228
        1⤵
          PID:3004

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/228-133-0x0000000000400000-0x0000000001DFB000-memory.dmp

          Filesize

          26.0MB

          Download