Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/08/2023, 00:03

General

  • Target

    ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe

  • Size

    1.2MB

  • MD5

    ad25aad6debda8adce397f161309a5be

  • SHA1

    f163544c66a1f37ff2bebd3cc532fb6f97413c96

  • SHA256

    ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1

  • SHA512

    0683c470607b364af2cef82f46f7e70e670918100f2ac248722c41fff54f94b5371d07f0244dd8091b1b92e41a81a369873f9d3feaf2f250b5cc3983fa3a51ba

  • SSDEEP

    12288:TIzIM4/h0cRjG/kvMTheu8WDY3HlHgUoSPL/W/ZlW+V1jrpduBgVXceR5+n1pwGO:TX/h0cEnh8WD8lHvWjW+DXpArdPM9

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe
    "C:\Users\Admin\AppData\Local\Temp\ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe"
    1⤵
      PID:2680
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 452
        2⤵
        • Program crash
        PID:4896
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 496
        2⤵
        • Program crash
        PID:3532
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 2680 -ip 2680
      1⤵
        PID:4552
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2680 -ip 2680
        1⤵
          PID:1720

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2680-0-0x0000000000CF0000-0x0000000000E84AB4-memory.dmp

          Filesize

          1.6MB

        • memory/2680-1-0x0000000000CF0000-0x0000000000E84AB4-memory.dmp

          Filesize

          1.6MB