Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 15:40

General

  • Target

    2a111ee89117801815336ee54e29b725.exe

  • Size

    204KB

  • MD5

    2a111ee89117801815336ee54e29b725

  • SHA1

    7c28af9006c9d69c9c0f8ec911c44a76a007c512

  • SHA256

    2fe7d6833b1742c3efc8869cd01d4edfa49abbc54e4feb3eda3e29f2822332c9

  • SHA512

    ae602c3e391c119d2bf3715e6eb50f9010442f76c61aa4b6efa83678b402cd7ffcf6d4b6aa1717376f1cf4d12321d3de2b7df0dd99dc257f349be852cee1d20f

  • SSDEEP

    3072:VwQCSes3twq2J1JdPyTgbIoL/TcEruFKSXqEKldAhk32Frbyl6NXdI208wer:VwQtesEJHiF0TzuQbEKYK2FbNt/r

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a111ee89117801815336ee54e29b725.exe
    "C:\Users\Admin\AppData\Local\Temp\2a111ee89117801815336ee54e29b725.exe"
    1⤵
      PID:3660
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3660 -s 352
        2⤵
        • Program crash
        PID:3344
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3660 -ip 3660
      1⤵
        PID:3744

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3660-1-0x000000000033A000-0x000000000036D000-memory.dmp

        Filesize

        204KB

      • memory/3660-0-0x00000000002E0000-0x000000000036CEF4-memory.dmp

        Filesize

        563KB

      • memory/3660-2-0x00000000002E0000-0x000000000036CEF4-memory.dmp

        Filesize

        563KB