Overview

overview

6

Static

static

1

63f30ff70e...67.exe

windows7-x64

6

63f30ff70e...67.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    245s
  • max time network
    270s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 23:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63f30ff70edc3d4df7210fe25cfb7549b0b90083cbf398b373d29bd8602ee067.exe

  • Size

    5.0MB

  • MD5

    36f4c257751059dc25ad1d972d3f13b3

  • SHA1

    134fee0f66c086ea8ce8dc054322e2171780d4a4

  • SHA256

    63f30ff70edc3d4df7210fe25cfb7549b0b90083cbf398b373d29bd8602ee067

  • SHA512

    f82a8d84a50d004b6af6a7f175dd6da8b9158363895b4dadbf6d3ec454a4c0cd55cbf54bb38621b2d8ae01cfa55b8c865bc3ae3ab2f4284f16df7553ae645929

  • SSDEEP

    98304:y2G+IjQG748/OdxF7LWOyb4YKdCQURvmZJF1k5:lG+gfOdxF7LN04Xd/0

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\63f30ff70edc3d4df7210fe25cfb7549b0b90083cbf398b373d29bd8602ee067.exe
    "C:\Users\Admin\AppData\Local\Temp\63f30ff70edc3d4df7210fe25cfb7549b0b90083cbf398b373d29bd8602ee067.exe"
    1⤵
      PID:3832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 448
        2⤵
        • Program crash
        PID:996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 480
        2⤵
        • Program crash
        PID:2060
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3832 -ip 3832
      1⤵
        PID:1252
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3832 -ip 3832
        1⤵
          PID:3080

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3832-0-0x00000000008F0000-0x0000000000DF4742-memory.dmp

          Filesize

          5.0MB

          Download

        • memory/3832-1-0x00000000008F0000-0x0000000000DF4742-memory.dmp

          Filesize

          5.0MB

          Download