Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 05:38

General

  • Target

    da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe

  • Size

    1.8MB

  • MD5

    6a079e75af8c77770b471a26e978a298

  • SHA1

    7954e161de0efb110911a4c7554d456b52eaaf95

  • SHA256

    da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d

  • SHA512

    4511fb73c77599458c28def99675a91901b9041717f2382d9cef0afebb3a2cfc586c8d0591e7d130c087e2d6dc78fd1f506e484663203b4fe6f4eeeac6f3847f

  • SSDEEP

    49152:vuQqJ4djB9caTytwC+a/g6jSHHbd0z4tFsab6DtFM:GIjDciy2C+0gwm7dgCTb6

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe
    "C:\Users\Admin\AppData\Local\Temp\da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe"
    1⤵
      PID:4976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 520
        2⤵
        • Program crash
        PID:4564
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 568
        2⤵
        • Program crash
        PID:4092
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4976 -ip 4976
      1⤵
        PID:1524
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4976 -ip 4976
        1⤵
          PID:4536

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads