Analysis

  • max time kernel
    150s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2023 18:47

General

  • Target

    00e603a2365381652b3f685eed18daa7.exe

  • Size

    481KB

  • MD5

    00e603a2365381652b3f685eed18daa7

  • SHA1

    64c9d783810f8ebff9864d969c3d84db7f96fc30

  • SHA256

    7158dacb58afeb5e6971b4e915e8d49b4d2014155cbea90bb91e54d988f3643e

  • SHA512

    fc358a2d479855028299eee60a6f893ddc90404c01351635b2ee15e9193e9b9558b2425f3b76d3383e2d9cd0242d003fdf504d0dfa120f9fefc6e4a8ce29645f

  • SSDEEP

    12288:XO71QnahHVy6xZDIZLRuIqggbgV/MN26NQQC5Qz+Xi7W5ZGNj1S:Xg5IqgtBC26NdGQzLyZu1S

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\00e603a2365381652b3f685eed18daa7.exe
    "C:\Users\Admin\AppData\Local\Temp\00e603a2365381652b3f685eed18daa7.exe"
    1⤵
      PID:3716
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 544
        2⤵
        • Program crash
        PID:2444
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 544
        2⤵
        • Program crash
        PID:1200
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3716 -ip 3716
      1⤵
        PID:1948
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3716 -ip 3716
        1⤵
          PID:2476

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3716-3-0x00000000006C0000-0x00000000007C0000-memory.dmp

          Filesize

          1024KB