Overview

overview

3

Static

static

3

fd489183db...ce.exe

windows7-x64

1

fd489183db...ce.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/12/2023, 22:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fd489183dba6aee573b59a2d57277fce.exe

  • Size

    246KB

  • MD5

    fd489183dba6aee573b59a2d57277fce

  • SHA1

    d1c09c9fb15964ff8cbd95ac8cbabfcd308316c4

  • SHA256

    e4d993b39650f465926c696b4f6aa02c99a02c669fbaf03cbb67bcced66d7636

  • SHA512

    df579efe0475c2d8d7b12d407fc9aecedcb0e0d5b190784647d8c0a42f531fd2714a07371fa1e9fe7ee872e639f9f9fc3ddcce28259dbc999492beaf416c3d71

  • SSDEEP

    6144:PhUgwC3Eo4m7Ta7OXZVyBc2JJRQkNoH1ChG1u6Lf0Er:PTweZ4sa7MeBdfRQkhWuwM2

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4424 -ip 4424
    1⤵
      PID:3540
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 392
      1⤵
      • Program crash
      PID:2060
    • C:\Users\Admin\AppData\Local\Temp\fd489183dba6aee573b59a2d57277fce.exe
      "C:\Users\Admin\AppData\Local\Temp\fd489183dba6aee573b59a2d57277fce.exe"
      1⤵
        PID:4424
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 464
          2⤵
          • Program crash
          PID:2192
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4424 -ip 4424
        1⤵
          PID:2004

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4424-2-0x00000000005A0000-0x00000000005E6000-memory.dmp

          Filesize

          280KB

          Download

        • memory/4424-0-0x0000000000400000-0x0000000000472000-memory.dmp

          Filesize

          456KB

          Download

        • memory/4424-4-0x00000000005A0000-0x00000000005E6000-memory.dmp

          Filesize

          280KB

          Download

        • memory/4424-3-0x0000000000400000-0x0000000000472000-memory.dmp

          Filesize

          456KB

          Download