Analysis

  • max time kernel
    439s
  • max time network
    445s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20-12-2023 01:43

General

  • Target

    7afefba65e72f42925ba76fae9ea98286eff7d0d01dcccd07c6117384858b6bb.exe

  • Size

    381KB

  • MD5

    db78b6b4e4ace66632b1b7d746f1d716

  • SHA1

    8e2c19b9247bb799a2f0191af144cdf2e85db099

  • SHA256

    7afefba65e72f42925ba76fae9ea98286eff7d0d01dcccd07c6117384858b6bb

  • SHA512

    957ec989a52790550c15b030d0352baf714e36e9c5956eed6d9626b046a59b1bcf30d5bc283eb72c692df7494e8ecf8a1e0d3aea922118f52edcbf9f90879df1

  • SSDEEP

    6144:8qprONykLCWtRm2YXSO6UBN+k2LaAa4TbuS0TLCK:LpaNyk2WHm2u2U8aAa4T6SECK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7afefba65e72f42925ba76fae9ea98286eff7d0d01dcccd07c6117384858b6bb.exe
    "C:\Users\Admin\AppData\Local\Temp\7afefba65e72f42925ba76fae9ea98286eff7d0d01dcccd07c6117384858b6bb.exe"
    1⤵
      PID:3084
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 408
        2⤵
        • Program crash
        PID:3944
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3084 -ip 3084
      1⤵
        PID:4820

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3084-0-0x0000000002A50000-0x0000000002A75000-memory.dmp

        Filesize

        148KB

      • memory/3084-1-0x0000000002AB0000-0x0000000002AE3000-memory.dmp

        Filesize

        204KB

      • memory/3084-2-0x0000000002A50000-0x0000000002A75000-memory.dmp

        Filesize

        148KB