Analysis
-
max time kernel
148s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 04:16
General
-
Target
53510ac4261355d36128933ee91556aa.exe
-
Size
561KB
-
MD5
53510ac4261355d36128933ee91556aa
-
SHA1
c7f86f10f9b9e05269653b95ab3b83b169db96b0
-
SHA256
169a755a8a44e624d7a38159a74946a0b66da0a22d6426d860e5b3f548307700
-
SHA512
10e2567e86ce350806216f4dc61f5598d63ea68ce08d8f0ca64fe5d53ab2c2e6d5982709e8a10dc0dd30e83e3a27db443abcbff7dae8593f6db2b15618170675
-
SSDEEP
6144:XdT8JpajvHuS6kAlzKGn2YxRCUBsmo8ByRx0XKqSQvg0wDkaOQt1CD3+an3+Znfe:X5OaNODr2Uux0aGmOTynfIb9
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Suspicious use of UnmapMainImage 3 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\53510ac4261355d36128933ee91556aa.exe"C:\Users\Admin\AppData\Local\Temp\53510ac4261355d36128933ee91556aa.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\53510ac4261355d36128933ee91556aa.exestart2⤵
- Suspicious use of UnmapMainImage
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1948 -s 4963⤵
- Program crash
-
-
-
C:\Users\Admin\AppData\Local\Temp\53510ac4261355d36128933ee91556aa.exewatch2⤵
- Suspicious use of UnmapMainImage
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 116 -s 4883⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 2216 -ip 22161⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 116 -ip 1161⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 1948 -ip 19481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
584KB
-
Filesize
584KB
-
Filesize
584KB
-
Filesize
584KB
-
Filesize
124KB
-
Filesize
584KB
-
Filesize
584KB