Overview

overview

6

Static

static

1

05e446db7d...c7.exe

windows7-x64

6

05e446db7d...c7.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    128s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2023, 00:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    05e446db7d6bfa87b489ab0a72cd2a560d57b038a4c584c00ed728f0b2ed53c7.exe

  • Size

    885KB

  • MD5

    9ae9f2541423d75bd446a187dac79eac

  • SHA1

    9d25944c2fb81ca5cee16a35e9d592cc17034564

  • SHA256

    05e446db7d6bfa87b489ab0a72cd2a560d57b038a4c584c00ed728f0b2ed53c7

  • SHA512

    e7651051055d497b0c3bcddb0ffe31d7354b4a8c355f189377e3732d476e16acf26b02b910553b689ad1e8b50d4bb9ea95a2a98924341d11a10fe70a10ca7c2b

  • SSDEEP

    6144:n90KvkRJSTDiYxFJzKZ7YQr9WOFYU2QVlY2jgyRJK8XmZgIxriG/k83FuWeArGgB:nKKv

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05e446db7d6bfa87b489ab0a72cd2a560d57b038a4c584c00ed728f0b2ed53c7.exe
    "C:\Users\Admin\AppData\Local\Temp\05e446db7d6bfa87b489ab0a72cd2a560d57b038a4c584c00ed728f0b2ed53c7.exe"
    1⤵
      PID:2108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 268
        2⤵
        • Program crash
        PID:4832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 276
        2⤵
        • Program crash
        PID:3604
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2108 -ip 2108
      1⤵
        PID:3528
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2108 -ip 2108
        1⤵
          PID:2136

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2108-133-0x0000000000380000-0x000000000046076F-memory.dmp

                Filesize

                897KB

                Download

              • memory/2108-134-0x0000000000380000-0x000000000046076F-memory.dmp

                Filesize

                897KB

                Download