Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
29/12/2023, 18:58
General
-
Target
0116111cfaf0525337751e66477967ee.exe
-
Size
149KB
-
MD5
0116111cfaf0525337751e66477967ee
-
SHA1
115b7ac4aafae6999a120c9e6ce5594340e1ee88
-
SHA256
737b3fca02b8ccb3173b0094b533de21542b0477fbcbea1454bbdfeba8d24793
-
SHA512
f049e3d8b96d97f3df28498d25519a33cf1968fd7ea3c630ceaa9551c7edbdd54672a96e9a400bf876c31fa5faf126ddfcc793408794dc314be50657314c62d1
-
SSDEEP
3072:vjU96HM0XUGXU2Foh0Uu/xSgBvIbAyTq/VWUV9Aep6WBFTfdkWb:vjInVh05JSCvIbBTq/T6WBFTVkWb
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Modifies registry class 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0116111cfaf0525337751e66477967ee.exe"C:\Users\Admin\AppData\Local\Temp\0116111cfaf0525337751e66477967ee.exe"1⤵
- Modifies registry class
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 4522⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 4882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3316 -ip 33161⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 3316 -ip 33161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
212KB
-
Filesize
188KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB