Overview

overview

3

Static

static

3

0c90279cfa...3c.exe

windows7-x64

1

0c90279cfa...3c.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    169s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 06:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0c90279cfa11d4c76282f817aba4783c.exe

  • Size

    11.7MB

  • MD5

    0c90279cfa11d4c76282f817aba4783c

  • SHA1

    c72d4575c2cfa9f3e6ef08880154038532e9311a

  • SHA256

    e9c34ddce287b6ed0190c09c98a0f51c401dab92933cd4743d76a34f57f88229

  • SHA512

    e8639ec52670c65b7ca615bc43134617815b388ee7984860962de10a348745ecfb2aa087aedcf0b184b05e21e563520ed75be2bbdc81915a9323151fa287c6df

  • SSDEEP

    196608:RN1swAeCvfYeHJ2JOEWj75Tg2ovfuNmVKo3KAUoO6frSzreqNKas2:RNAlHJbEWj+29NycftDaOKaX

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c90279cfa11d4c76282f817aba4783c.exe
    "C:\Users\Admin\AppData\Local\Temp\0c90279cfa11d4c76282f817aba4783c.exe"
    1⤵
      PID:2188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 628
        2⤵
        • Program crash
        PID:4540
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 628
        2⤵
        • Program crash
        PID:3108
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2188 -ip 2188
      1⤵
        PID:4124
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 2188 -ip 2188
        1⤵
          PID:1768

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2188-0-0x00000000027B0000-0x0000000002974000-memory.dmp

                Filesize

                1.8MB

                Download

              • memory/2188-1-0x0000000000400000-0x000000000077A000-memory.dmp

                Filesize

                3.5MB

                Download

              • memory/2188-2-0x0000000000400000-0x000000000077A000-memory.dmp

                Filesize

                3.5MB

                Download

              • memory/2188-5-0x00000000027B0000-0x0000000002974000-memory.dmp

                Filesize

                1.8MB

                Download