Analysis

  • max time kernel
    146s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 11:33

General

  • Target

    6b0d6dbf9d6a411d35b250595cff4b3f.exe

  • Size

    212KB

  • MD5

    6b0d6dbf9d6a411d35b250595cff4b3f

  • SHA1

    22e3dfe9ff7968f143237d90aeb6bf51de0ecc59

  • SHA256

    e5c92201b021ea0cde8a889902f2404c100a903a862be17e7a387d331446f83f

  • SHA512

    64a3072be6c8203b6f031c738c50d0b21ca8323ac444fa0907bf7fbb3bae7cec8f50b7b5a03b23047eee4638d6a9de91c99738611e88db57da7f079944105732

  • SSDEEP

    6144:iDpla3f0AQ2Zm63AEGLozFsKxrxiHMTYTzxxjXPfp:iDplahvMLozFJ0FX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6b0d6dbf9d6a411d35b250595cff4b3f.exe
    "C:\Users\Admin\AppData\Local\Temp\6b0d6dbf9d6a411d35b250595cff4b3f.exe"
    1⤵
      PID:4592
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 500
        2⤵
        • Program crash
        PID:2916
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4592 -ip 4592
      1⤵
        PID:2780

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4592-0-0x0000000001000000-0x00000000010DB000-memory.dmp

        Filesize

        876KB

      • memory/4592-2-0x0000000001000000-0x00000000010DB000-memory.dmp

        Filesize

        876KB

      • memory/4592-1-0x0000000000870000-0x0000000000899000-memory.dmp

        Filesize

        164KB

      • memory/4592-3-0x0000000001000000-0x00000000010DB000-memory.dmp

        Filesize

        876KB

      • memory/4592-5-0x0000000000870000-0x0000000000899000-memory.dmp

        Filesize

        164KB