Analysis

  • max time kernel
    141s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 06:02

General

  • Target

    97b2aaa4dde829bf2522a2db2ff8e877b28397d10c15b98ccdf4d73bdb2e4cfd_JC.exe

  • Size

    740KB

  • MD5

    907c1df92987f7a159ca9ef51d0c15f2

  • SHA1

    b71b97a5ec9765de51db5f5dd4905fa2b5df23f7

  • SHA256

    97b2aaa4dde829bf2522a2db2ff8e877b28397d10c15b98ccdf4d73bdb2e4cfd

  • SHA512

    4a493ff6e9d2114de7fab17b8741dd61f4656a33ca6be8bd8b22b12cd6dc83df8a69c28e245b2e17a01c1cdf9873b426fd6f137739f3e2a60ac66f818db2dcec

  • SSDEEP

    6144:qsrgJbHPwSKs/GgIthPE2K0xWJxc7XKv6wdkZrchFN7MMOzzzP//KxX5:q/j4SKs/jIvLKOrE6qkZghP

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\97b2aaa4dde829bf2522a2db2ff8e877b28397d10c15b98ccdf4d73bdb2e4cfd_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\97b2aaa4dde829bf2522a2db2ff8e877b28397d10c15b98ccdf4d73bdb2e4cfd_JC.exe"
    1⤵
      PID:4992
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 224
        2⤵
        • Program crash
        PID:4592
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 224
        2⤵
        • Program crash
        PID:2108
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4992 -ip 4992
      1⤵
        PID:4596
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4992 -ip 4992
        1⤵
          PID:4940

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads