Overview

overview

3

Static

static

3

3abef5b422...cf.exe

windows7-x64

3

3abef5b422...cf.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 20:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3abef5b422d37e85a0e4036e24a7facf.exe

  • Size

    368KB

  • MD5

    3abef5b422d37e85a0e4036e24a7facf

  • SHA1

    70d87ed6293f786a1f4577b25c7fecf193fa0d28

  • SHA256

    aae522c54932d1b2ba00aca76ffbca5adc3def5badc917351d0ec62cd4e2744d

  • SHA512

    ea51345d475e5be2a0933450497b1913c1c6550efc9948bf66eb9b25190f91185d292c7050a8c71a6fcb6d0a3869a6f50cd45da5a2c7483b3ce7f740cfcdb7b4

  • SSDEEP

    6144:RTAp4naqm5GR/0N4Ftn6vicI8qtQQenKDFujBeqSDgzB8jk3h:R041m5Q/0N4L9xYus1NSD2Cg3h

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3abef5b422d37e85a0e4036e24a7facf.exe
    "C:\Users\Admin\AppData\Local\Temp\3abef5b422d37e85a0e4036e24a7facf.exe"
    1⤵
      PID:4672
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 328
        2⤵
        • Program crash
        PID:1572
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4672 -ip 4672
      1⤵
        PID:1236

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4672-0-0x0000000000800000-0x0000000000860000-memory.dmp

        Filesize

        384KB

        Download