Overview

overview

3

Static

static

3

140fbd05eb...ed.exe

windows7-x64

3

140fbd05eb...ed.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-12-2023 21:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    140fbd05ebe0a77ffbda49890df216ed.exe

  • Size

    438KB

  • MD5

    140fbd05ebe0a77ffbda49890df216ed

  • SHA1

    6ce2f5718ea4e6d84a86875f98589c38d3c9854a

  • SHA256

    16bc0c8dfdf84ca187b6c7f6a01876358fccda7eb6e58d9e4b6cbde0be381d5e

  • SHA512

    885e313676b3b0a6d7d1fc63d5851bdec6a1cd545788b91e8b0260a0f2f49dc656384c14d4ff524ddfda158dbbadfd2d63e487f121f7c41868af8189db1f29a7

  • SSDEEP

    6144:k+5mBWIOZlpmD7C4u5tG/MyB0F9ybz0yZTivW/STsFs/bp:k+5mBfAmPC4u5c/MES9yXZTxYp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\140fbd05ebe0a77ffbda49890df216ed.exe
    "C:\Users\Admin\AppData\Local\Temp\140fbd05ebe0a77ffbda49890df216ed.exe"
    1⤵
      PID:3468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3468 -s 224
        2⤵
        • Program crash
        PID:4672
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3468 -ip 3468
      1⤵
        PID:1684

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3468-0-0x0000000000D30000-0x0000000000D77000-memory.dmp

        Filesize

        284KB

        Download

      • memory/3468-1-0x0000000000D30000-0x0000000000D77000-memory.dmp

        Filesize

        284KB

        Download