Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/12/2023, 20:45

General

  • Target

    0388678c64e8dcddadb32588082231b3.exe

  • Size

    196KB

  • MD5

    0388678c64e8dcddadb32588082231b3

  • SHA1

    9c8bbfe917bb2083038674daf6a9f7800aa872fd

  • SHA256

    cc8e9353c1977f1f2793201774de2718c74cbb7d0cde80ba7d870c5ad5329238

  • SHA512

    5776eeceebabc36f4318a8dd805a4d5141e728dcfd5d1e7e1ee355fc32969d29bc4f9f1ed3cbe2f4830b812ffaa5ded7de1002aeb83201bc23e32295a8418d6b

  • SSDEEP

    6144:AcJ1AO/sXCiUrEeRV9ukInvTyd/tz1OuG0/:Rj/sXurET+d/tBV/

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0388678c64e8dcddadb32588082231b3.exe
    "C:\Users\Admin\AppData\Local\Temp\0388678c64e8dcddadb32588082231b3.exe"
    1⤵
      PID:4240
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 552
        2⤵
        • Program crash
        PID:1536
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 576
        2⤵
        • Program crash
        PID:3268
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4240 -ip 4240
      1⤵
        PID:3860
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4240 -ip 4240
        1⤵
          PID:956

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4240-0-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB

              • memory/4240-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB

              • memory/4240-10-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB

              • memory/4240-11-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB

              • memory/4240-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

                Filesize

                368KB