Overview

overview

3

Static

static

3

04bfb802ba...5c.exe

windows7-x64

3

04bfb802ba...5c.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/12/2023, 21:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04bfb802bacb29f5246803ea9afc2c5c.exe

  • Size

    89KB

  • MD5

    04bfb802bacb29f5246803ea9afc2c5c

  • SHA1

    786291554db02bdbe3ef3909f9aac0cf7edc34b3

  • SHA256

    ad2508e8eac2042cd3fbef06cfa119e709be40eef1cf6273bb3a431a24b07084

  • SHA512

    43b214475f5942f5bc0346c63ee7193870575674bd087ef31c253792a199eafb41232b1d93bf7e269bd8c1701770f70c7ba98942eb20e5f336ee89a3bf152659

  • SSDEEP

    1536:0dxi624skXk83nuRTpUkW/h123wHvqPS+FkVp0P4fp9gj2e+wD5WJkFD3j20x:0dxBNLoTpUkqfVVh3gjzxD5skRz20x

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04bfb802bacb29f5246803ea9afc2c5c.exe
    "C:\Users\Admin\AppData\Local\Temp\04bfb802bacb29f5246803ea9afc2c5c.exe"
    1⤵
      PID:4588
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 224
        2⤵
        • Program crash
        PID:3856
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4588 -ip 4588
      1⤵
        PID:2324

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4588-0-0x0000000000400000-0x0000000000433000-memory.dmp

        Filesize

        204KB

        Download

      • memory/4588-1-0x0000000000400000-0x0000000000433000-memory.dmp

        Filesize

        204KB

        Download