Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/10/2023, 13:05

General

  • Target

    14f54af926d9ecd4e1854e9e5e91a692259ad31bfbd350a524bb3d2a72c6ed5c.exe

  • Size

    15.2MB

  • MD5

    1d9c26bd37743e9af3dd8c299554247a

  • SHA1

    c8dbf1c6e7c3c735cfb71dbf0a9cd15ba8ec1c47

  • SHA256

    14f54af926d9ecd4e1854e9e5e91a692259ad31bfbd350a524bb3d2a72c6ed5c

  • SHA512

    6b7815b3cb82d01f3ae33e4c73182963a1c1c93f79f22b318389de47028fb2ae101888a2bd1764c6ca8b4291dd54192d8a96dfc6caef98d4da506395b70c2958

  • SSDEEP

    393216:WHcxL6iY5/RIC6Q24ioq8n57MR/qwqf/hlyy715:WmGikRIC/bn5Cqp/hlyU5

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\14f54af926d9ecd4e1854e9e5e91a692259ad31bfbd350a524bb3d2a72c6ed5c.exe
    "C:\Users\Admin\AppData\Local\Temp\14f54af926d9ecd4e1854e9e5e91a692259ad31bfbd350a524bb3d2a72c6ed5c.exe"
    1⤵
      PID:4672
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 652
        2⤵
        • Program crash
        PID:972
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4672 -ip 4672
      1⤵
        PID:1356

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4672-0-0x0000000000400000-0x0000000001C54000-memory.dmp

              Filesize

              24.3MB

            • memory/4672-2-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-4-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-7-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-11-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-15-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-19-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-23-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-26-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-27-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-28-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-29-0x00000000064D0000-0x0000000006892000-memory.dmp

              Filesize

              3.8MB

            • memory/4672-30-0x0000000000400000-0x0000000001C54000-memory.dmp

              Filesize

              24.3MB