Analysis
-
max time kernel
147s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
26/12/2023, 04:37
General
-
Target
54ae193e33da4aaf5359d88b052215a0.exe
-
Size
162KB
-
MD5
54ae193e33da4aaf5359d88b052215a0
-
SHA1
b0a922e64a3ebe73b9dc1e78394119767941d3a2
-
SHA256
17de792f62bab893dcd948477e169ffa8399a6f2a7451595f6bb83e0ed6d01b1
-
SHA512
88ac3d5309cb77d39de1fe018296a8e1540dbc4c314b8a86c6ebd93348ce16e7c42744fae080ec7dd2351ab803cd3f8cbb5c46cee57023d001bc97b902c5d084
-
SSDEEP
3072:TXfB73q4hh4v5fRQbJjyTRhC6I4/Xis4Ny5HQ2xn8PIIOTK0R9l8/RllsG1qaQNG:jBPW5fiNjmCI/y+5HJR8PIIcKK9Kpl1p
Score
10/10
Malware Config
Signatures
-
Ramnit
Ramnit is a versatile family that holds viruses, worms, and Trojans.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\54ae193e33da4aaf5359d88b052215a0.exe"C:\Users\Admin\AppData\Local\Temp\54ae193e33da4aaf5359d88b052215a0.exe"1⤵
- Loads dropped DLL
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 101802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4684 -ip 46841⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
448KB
-
Filesize
448KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
448KB
-
Filesize
448KB