Overview

overview

10

Static

static

10

780-0-0x00...ry.exe

windows7-x64

1

780-0-0x00...ry.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    145s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-12-2023 13:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    780-0-0x0000000000400000-0x000000000043D000-memory.exe

  • Size

    244KB

  • MD5

    8727c11c0df14b445a3504f7a467d2de

  • SHA1

    4b180fb6a1011b2daa1e2edef01d9e279425ce12

  • SHA256

    4f74a917364f4bdc0f7df53f6e5f5c664789068e65a43c8d3f1a53415063f71d

  • SHA512

    8ec4a450c8b34f8d2d4d2065a58aaa7dee942619041a3a8412f025c6da51a3c140a5c079682881dfd665bcf3341221e3498d87fe0db6764700529815b927e9e3

  • SSDEEP

    1536:UYz/E8hW9NdYAygNlvhIoOB9SAKD7PNch1ZmmImh1ADN8blGe5SagvHLNaV88J3n:Um/E8k9ZjpIn+zNch12KbAwSaSEJSp8

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\780-0-0x0000000000400000-0x000000000043D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\780-0-0x0000000000400000-0x000000000043D000-memory.exe"
    1⤵
      PID:1884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 224
        2⤵
        • Program crash
        PID:928
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1884 -ip 1884
      1⤵
        PID:5096

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1884-0-0x0000000000400000-0x000000000043D000-memory.dmp

        Filesize

        244KB

        Download