Analysis

  • max time kernel
    139s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 15:54

General

  • Target

    623284a27c89c60d20b36cdba1f62fa5d0a2b3f2262dc737fc36e879644df7f5.exe

  • Size

    367KB

  • MD5

    d83353d3be15b1ff2726c6c5841f603c

  • SHA1

    0aa2a8249e2e2135c8e7a4786c650fa4b7710c0f

  • SHA256

    623284a27c89c60d20b36cdba1f62fa5d0a2b3f2262dc737fc36e879644df7f5

  • SHA512

    0ecf6721242f41cac0ade8f2e9708bbff8b4122491e13ee1e77041007a6439859c3deaba679ef880ac16047b4bbef3bde891b395ee0f1c0ff90630af6a178ab5

  • SSDEEP

    6144:22O8LUK9UBs0JPnUUMK8fBEDT7HdOWO/c/Xrk6s2a/OTsT:2oAK9UBsMnU3nan7HgZUzk6AeU

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\623284a27c89c60d20b36cdba1f62fa5d0a2b3f2262dc737fc36e879644df7f5.exe
    "C:\Users\Admin\AppData\Local\Temp\623284a27c89c60d20b36cdba1f62fa5d0a2b3f2262dc737fc36e879644df7f5.exe"
    1⤵
      PID:3272
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 1076
        2⤵
        • Program crash
        PID:4908
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3272 -ip 3272
      1⤵
        PID:3800

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3272-0-0x0000000002220000-0x000000000225B000-memory.dmp

              Filesize

              236KB

            • memory/3272-1-0x0000000000780000-0x00000000007D0000-memory.dmp

              Filesize

              320KB

            • memory/3272-2-0x0000000000400000-0x00000000004AC000-memory.dmp

              Filesize

              688KB

            • memory/3272-3-0x00000000026B0000-0x0000000002716000-memory.dmp

              Filesize

              408KB

            • memory/3272-4-0x0000000074480000-0x0000000074C30000-memory.dmp

              Filesize

              7.7MB

            • memory/3272-5-0x0000000000A70000-0x0000000000A80000-memory.dmp

              Filesize

              64KB

            • memory/3272-6-0x0000000000A70000-0x0000000000A80000-memory.dmp

              Filesize

              64KB

            • memory/3272-7-0x0000000004C80000-0x0000000005224000-memory.dmp

              Filesize

              5.6MB

            • memory/3272-8-0x0000000005230000-0x0000000005292000-memory.dmp

              Filesize

              392KB

            • memory/3272-9-0x0000000005290000-0x0000000005322000-memory.dmp

              Filesize

              584KB

            • memory/3272-10-0x0000000002220000-0x000000000225B000-memory.dmp

              Filesize

              236KB

            • memory/3272-11-0x0000000000780000-0x00000000007D0000-memory.dmp

              Filesize

              320KB

            • memory/3272-13-0x0000000000400000-0x00000000004AC000-memory.dmp

              Filesize

              688KB

            • memory/3272-14-0x0000000074480000-0x0000000074C30000-memory.dmp

              Filesize

              7.7MB

            • memory/3272-15-0x0000000000400000-0x00000000004AC000-memory.dmp

              Filesize

              688KB

            • memory/3272-17-0x0000000074480000-0x0000000074C30000-memory.dmp

              Filesize

              7.7MB