Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 23:03

General

  • Target

    41fab16cadfef1fa18e6d5554d72868d.exe

  • Size

    1017KB

  • MD5

    41fab16cadfef1fa18e6d5554d72868d

  • SHA1

    51aaa5f1930824f5661de9cb4e43227a73edd4af

  • SHA256

    bcf192bdcd7bbad46cb0d7f6cb392233abdb0251db3fea05936d4c0a0c7cc1bc

  • SHA512

    5f349fe86f29efa6cf52a8f6a6bb4fcfdf5fc190c59a40a7ab61d419418a9847f6905b43cdf1eb798fe4b2caf4a23fe471172664a157fb27affeb413de91ea57

  • SSDEEP

    24576:UjW8Zx2IY6SmUg6MHyPmMEduQLG4R1vuRut1Z:Uq8jTRSScE59RCW

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\41fab16cadfef1fa18e6d5554d72868d.exe
    "C:\Users\Admin\AppData\Local\Temp\41fab16cadfef1fa18e6d5554d72868d.exe"
    1⤵
    • Adds Run key to start application
    PID:4716
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4716 -s 892
      2⤵
      • Program crash
      PID:1212
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4716 -ip 4716
    1⤵
      PID:2860

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4716-1-0x0000000000400000-0x000000000082F004-memory.dmp

      Filesize

      4.2MB

    • memory/4716-2-0x0000000000930000-0x0000000000B30000-memory.dmp

      Filesize

      2.0MB

    • memory/4716-3-0x0000000000910000-0x0000000000912000-memory.dmp

      Filesize

      8KB

    • memory/4716-4-0x00000000026D0000-0x00000000026D1000-memory.dmp

      Filesize

      4KB

    • memory/4716-6-0x0000000000400000-0x000000000082F004-memory.dmp

      Filesize

      4.2MB

    • memory/4716-8-0x0000000000930000-0x0000000000B30000-memory.dmp

      Filesize

      2.0MB

    • memory/4716-11-0x0000000000910000-0x0000000000912000-memory.dmp

      Filesize

      8KB

    • memory/4716-12-0x00000000026D0000-0x00000000026D1000-memory.dmp

      Filesize

      4KB