e5152e0c6d430377988c326fd4c4da6615bc4d3d6afbac35146513dbec6d142f

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/12/2023, 22:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fbf0753988f6e278a9766c29de45cecd.exe
Size

1.6MB
MD5

fbf0753988f6e278a9766c29de45cecd
SHA1

5b88156909882c530235df9ab080d5144543f430
SHA256

e5152e0c6d430377988c326fd4c4da6615bc4d3d6afbac35146513dbec6d142f
SHA512

bfe6d67f86073821db278ca2c20fabebef7007dd49d5ea8f005bf60e24c0d436079dd5365363623e9d4249d65ea3e73d6a4c283358d045bb25f0f53265851094
SSDEEP

49152:SqJP/j515LJzZYy8MoPDMBqPtTe/LEXB8+mJu:Z3j5fhZ52IEPtCTEeY

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3988	3544	WerFault.exe	87

Modifies registry class 3 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	fbf0753988f6e278a9766c29de45cecd.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	fbf0753988f6e278a9766c29de45cecd.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	fbf0753988f6e278a9766c29de45cecd.exe

C:\Users\Admin\AppData\Local\Temp\fbf0753988f6e278a9766c29de45cecd.exe
"C:\Users\Admin\AppData\Local\Temp\fbf0753988f6e278a9766c29de45cecd.exe"
1⤵
- Modifies registry class
PID:3544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3544 -s 744
  2⤵
  - Program crash
  PID:3988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3544 -ip 3544
1⤵
PID:4148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3544-0-0x0000000000400000-0x00000000008CF000-memory.dmp

Filesize
4.8MB

Download
memory/3544-2-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-1-0x0000000002890000-0x0000000002891000-memory.dmp

Filesize
4KB

Download
memory/3544-3-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-4-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-5-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-6-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-7-0x0000000002890000-0x0000000002891000-memory.dmp

Filesize
4KB

Download
memory/3544-8-0x0000000002890000-0x0000000002893000-memory.dmp

Filesize
12KB

Download
memory/3544-9-0x00000000028A0000-0x00000000028A1000-memory.dmp

Filesize
4KB

Download
memory/3544-11-0x00000000028F0000-0x00000000028F1000-memory.dmp

Filesize
4KB

Download
memory/3544-10-0x00000000028E0000-0x00000000028E1000-memory.dmp

Filesize
4KB

Download
memory/3544-12-0x00000000026A0000-0x00000000026A1000-memory.dmp

Filesize
4KB

Download
memory/3544-13-0x0000000002880000-0x0000000002881000-memory.dmp

Filesize
4KB

Download
memory/3544-14-0x0000000002680000-0x0000000002681000-memory.dmp

Filesize
4KB

Download
memory/3544-15-0x0000000002690000-0x0000000002691000-memory.dmp

Filesize
4KB

Download
memory/3544-16-0x00000000028B0000-0x00000000028B1000-memory.dmp

Filesize
4KB

Download
memory/3544-17-0x00000000026C0000-0x00000000026C1000-memory.dmp

Filesize
4KB

Download
memory/3544-18-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download
memory/3544-19-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/3544-20-0x0000000002710000-0x0000000002711000-memory.dmp

Filesize
4KB

Download
memory/3544-21-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/3544-22-0x0000000002830000-0x0000000002831000-memory.dmp

Filesize
4KB

Download
memory/3544-23-0x0000000002900000-0x0000000002901000-memory.dmp

Filesize
4KB

Download
memory/3544-24-0x0000000002920000-0x0000000002921000-memory.dmp

Filesize
4KB

Download
memory/3544-25-0x0000000002910000-0x0000000002911000-memory.dmp

Filesize
4KB

Download
memory/3544-26-0x0000000002940000-0x0000000002941000-memory.dmp

Filesize
4KB

Download
memory/3544-27-0x0000000002930000-0x0000000002931000-memory.dmp

Filesize
4KB

Download
memory/3544-28-0x0000000002960000-0x0000000002961000-memory.dmp

Filesize
4KB

Download
memory/3544-29-0x0000000002950000-0x0000000002951000-memory.dmp

Filesize
4KB

Download
memory/3544-30-0x0000000002980000-0x0000000002981000-memory.dmp

Filesize
4KB

Download
memory/3544-42-0x0000000002B90000-0x0000000002B91000-memory.dmp

Filesize
4KB

Download
memory/3544-41-0x0000000002B60000-0x0000000002B61000-memory.dmp

Filesize
4KB

Download
memory/3544-40-0x0000000002B70000-0x0000000002B71000-memory.dmp

Filesize
4KB

Download
memory/3544-39-0x0000000002B30000-0x0000000002B31000-memory.dmp

Filesize
4KB

Download
memory/3544-38-0x0000000002B40000-0x0000000002B41000-memory.dmp

Filesize
4KB

Download
memory/3544-37-0x0000000002B10000-0x0000000002B11000-memory.dmp

Filesize
4KB

Download
memory/3544-36-0x0000000002B20000-0x0000000002B21000-memory.dmp

Filesize
4KB

Download
memory/3544-35-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

Filesize
4KB

Download
memory/3544-43-0x0000000002B80000-0x0000000002B81000-memory.dmp

Filesize
4KB

Download
memory/3544-34-0x0000000002B00000-0x0000000002B01000-memory.dmp

Filesize
4KB

Download
memory/3544-33-0x0000000002990000-0x0000000002991000-memory.dmp

Filesize
4KB

Download
memory/3544-32-0x00000000029A0000-0x00000000029A1000-memory.dmp

Filesize
4KB

Download
memory/3544-31-0x0000000002970000-0x0000000002971000-memory.dmp

Filesize
4KB

Download
memory/3544-45-0x0000000002D30000-0x0000000002D31000-memory.dmp

Filesize
4KB

Download
memory/3544-44-0x0000000002CD0000-0x0000000002CD1000-memory.dmp

Filesize
4KB

Download
memory/3544-46-0x00000000030A0000-0x00000000030A1000-memory.dmp

Filesize
4KB

Download
memory/3544-47-0x0000000003090000-0x0000000003091000-memory.dmp

Filesize
4KB

Download
memory/3544-48-0x00000000030C0000-0x00000000030C1000-memory.dmp

Filesize
4KB

Download
memory/3544-49-0x00000000030B0000-0x00000000030B1000-memory.dmp

Filesize
4KB

Download
memory/3544-50-0x00000000030E0000-0x00000000030E1000-memory.dmp

Filesize
4KB

Download
memory/3544-51-0x00000000030D0000-0x00000000030D1000-memory.dmp

Filesize
4KB

Download
memory/3544-52-0x00000000030F0000-0x00000000030F1000-memory.dmp

Filesize
4KB

Download
memory/3544-53-0x0000000003120000-0x0000000003121000-memory.dmp

Filesize
4KB

Download
memory/3544-54-0x0000000002CE0000-0x0000000002CE1000-memory.dmp

Filesize
4KB

Download
memory/3544-55-0x0000000002D10000-0x0000000002D11000-memory.dmp

Filesize
4KB

Download
memory/3544-56-0x0000000002D00000-0x0000000002D01000-memory.dmp

Filesize
4KB

Download
memory/3544-57-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

Filesize
4KB

Download
memory/3544-58-0x0000000002D40000-0x0000000002D41000-memory.dmp

Filesize
4KB

Download
memory/3544-59-0x0000000003100000-0x0000000003101000-memory.dmp

Filesize
4KB

Download
memory/3544-60-0x0000000003130000-0x0000000003131000-memory.dmp

Filesize
4KB

Download
memory/3544-61-0x0000000003160000-0x0000000003161000-memory.dmp

Filesize
4KB

Download
memory/3544-62-0x0000000003190000-0x0000000003191000-memory.dmp

Filesize
4KB

Download
memory/3544-63-0x0000000003180000-0x0000000003181000-memory.dmp

Filesize
4KB

Download
memory/3544-71-0x0000000000400000-0x00000000008CF000-memory.dmp

Filesize
4.8MB

Download
memory/3544-78-0x0000000000400000-0x00000000008CF000-memory.dmp

Filesize
4.8MB

Download
memory/3544-87-0x0000000000400000-0x00000000008CF000-memory.dmp

Filesize
4.8MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads