Overview

overview

10

Static

static

3

ff625dd048...f5.exe

windows7-x64

10

ff625dd048...f5.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    112s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2023 23:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5.exe

  • Size

    393KB

  • MD5

    4a54d5329f830a89bef8f7c9a139a1e7

  • SHA1

    cf1037640f8eff1f57dc39957b45924570e62141

  • SHA256

    ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5

  • SHA512

    1ac0073d827c2c9959ac92ccd77cab8ad839ae14cb67cd50f34f16e7d2254e1233c89476d94fbb98f4d8fb263f327ed97f7f1e05b7677d4d69a54d825a7d209c

  • SSDEEP

    6144:ELaHncfeWjEWFCLeXVJHjN2Pgi6iTbpht+GSmfJ09FX3N1pvYsS:E+EeWoWFxX7DNsgivTbphNS+JslS

Score
3/10

Malware Config

Signatures

  • Program crash 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5.exe
    "C:\Users\Admin\AppData\Local\Temp\ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5.exe"
    1⤵
      PID:2972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 584
        2⤵
        • Program crash
        PID:1652
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 616
        2⤵
        • Program crash
        PID:3992
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 696
        2⤵
        • Program crash
        PID:3724
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 848
        2⤵
        • Program crash
        PID:2872
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 696
        2⤵
        • Program crash
        PID:4548
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 876
        2⤵
        • Program crash
        PID:3376
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 1112
        2⤵
        • Program crash
        PID:3864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 1132
        2⤵
        • Program crash
        PID:3268
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 1212
        2⤵
        • Program crash
        PID:5096
      • C:\Users\Admin\AppData\Local\Temp\d4dd819322\Utsysc.exe
        "C:\Users\Admin\AppData\Local\Temp\d4dd819322\Utsysc.exe"
        2⤵
          PID:392
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 1264
          2⤵
          • Program crash
          PID:3220
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2972 -ip 2972
        1⤵
          PID:1316
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 2972 -ip 2972
          1⤵
            PID:1484
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 2972 -ip 2972
            1⤵
              PID:4912
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 2972 -ip 2972
              1⤵
                PID:864
              • C:\Windows\SysWOW64\WerFault.exe
                C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 2972 -ip 2972
                1⤵
                  PID:4704
                • C:\Windows\SysWOW64\WerFault.exe
                  C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2972 -ip 2972
                  1⤵
                    PID:3096
                  • C:\Windows\SysWOW64\WerFault.exe
                    C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2972 -ip 2972
                    1⤵
                      PID:2436
                    • C:\Windows\SysWOW64\WerFault.exe
                      C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2972 -ip 2972
                      1⤵
                        PID:2336
                      • C:\Windows\SysWOW64\WerFault.exe
                        C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 2972 -ip 2972
                        1⤵
                          PID:1328
                        • C:\Windows\SysWOW64\WerFault.exe
                          C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 2972 -ip 2972
                          1⤵
                            PID:3328

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Temp\d4dd819322\Utsysc.exe
                            Filesize

                            393KB

                            MD5

                            4a54d5329f830a89bef8f7c9a139a1e7

                            SHA1

                            cf1037640f8eff1f57dc39957b45924570e62141

                            SHA256

                            ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5

                            SHA512

                            1ac0073d827c2c9959ac92ccd77cab8ad839ae14cb67cd50f34f16e7d2254e1233c89476d94fbb98f4d8fb263f327ed97f7f1e05b7677d4d69a54d825a7d209c

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\d4dd819322\Utsysc.exe
                            Filesize

                            393KB

                            MD5

                            4a54d5329f830a89bef8f7c9a139a1e7

                            SHA1

                            cf1037640f8eff1f57dc39957b45924570e62141

                            SHA256

                            ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5

                            SHA512

                            1ac0073d827c2c9959ac92ccd77cab8ad839ae14cb67cd50f34f16e7d2254e1233c89476d94fbb98f4d8fb263f327ed97f7f1e05b7677d4d69a54d825a7d209c

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\d4dd819322\Utsysc.exe
                            Filesize

                            393KB

                            MD5

                            4a54d5329f830a89bef8f7c9a139a1e7

                            SHA1

                            cf1037640f8eff1f57dc39957b45924570e62141

                            SHA256

                            ff625dd0483caccac07b4233e3f8174a2237b8382da090067dc66213f5d9c8f5

                            SHA512

                            1ac0073d827c2c9959ac92ccd77cab8ad839ae14cb67cd50f34f16e7d2254e1233c89476d94fbb98f4d8fb263f327ed97f7f1e05b7677d4d69a54d825a7d209c

                            Download Submit

                          • memory/2972-1-0x00000000007B0000-0x00000000008B0000-memory.dmp

                            Filesize

                            1024KB

                            Download

                          • memory/2972-2-0x0000000000670000-0x00000000006DC000-memory.dmp

                            Filesize

                            432KB

                            Download

                          • memory/2972-3-0x0000000000400000-0x0000000000514000-memory.dmp

                            Filesize

                            1.1MB

                            Download

                          • memory/2972-16-0x0000000000670000-0x00000000006DC000-memory.dmp

                            Filesize

                            432KB

                            Download

                          • memory/2972-15-0x0000000000400000-0x0000000000514000-memory.dmp

                            Filesize

                            1.1MB

                            Download