Analysis

  • max time kernel
    139s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 16:57

General

  • Target

    0838bc871ed8013261a8e2a33cc47c287a63974b4a778143636ce4c751c73101.exe

  • Size

    13.7MB

  • MD5

    db635b2a9df4cd99c7af7ce7b4290afe

  • SHA1

    ec14780e315b84f82410fb72cfd243d93e0bc390

  • SHA256

    0838bc871ed8013261a8e2a33cc47c287a63974b4a778143636ce4c751c73101

  • SHA512

    d8f2a95839d67806390c9e7cb130a9e191daea798163fa9b6543606496b9eb40872eb4323da6465d7af34e7b1aab18680a77e295d841e765ece1d28731a06975

  • SSDEEP

    196608:8FLOyomFHKnPXh1jvKv6kD5O+KbD7TKpdqC7MRPOZSrhbKUngkngO4tDxnnpe9Bh:8Fih1rs5SfKn57MNhbdngHnpy2T9e

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0838bc871ed8013261a8e2a33cc47c287a63974b4a778143636ce4c751c73101.exe
    "C:\Users\Admin\AppData\Local\Temp\0838bc871ed8013261a8e2a33cc47c287a63974b4a778143636ce4c751c73101.exe"
    1⤵
      PID:4488
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 632
        2⤵
        • Program crash
        PID:2712
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4488 -ip 4488
      1⤵
        PID:4772

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4488-0-0x0000000000400000-0x0000000001843000-memory.dmp

              Filesize

              20.3MB

            • memory/4488-1-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-3-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-6-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-10-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-14-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-18-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-22-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-25-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-26-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-27-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-28-0x0000000005000000-0x00000000053C2000-memory.dmp

              Filesize

              3.8MB

            • memory/4488-29-0x0000000000400000-0x0000000001843000-memory.dmp

              Filesize

              20.3MB