Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 21:54

General

  • Target

    1db17cce7fad2a8aea9f04bba51a1076.exe

  • Size

    693KB

  • MD5

    1db17cce7fad2a8aea9f04bba51a1076

  • SHA1

    e9306dbff7650a9bf3c0e83e14c69b480bb46907

  • SHA256

    ffe86d2a17d379a5ee9ff1f0fd63182b0ea2767601a5aab755a26379381ff93b

  • SHA512

    8cbbb53ad4de5c41f585ecd6e267b2a46f8e05e6a332d0e1b9cf9bfb325c2a3c404fe1a6b1f9c04b42086a131f2e579926da8a5beb7a3af443c3db96405acf1a

  • SSDEEP

    12288:k1web+4/w8AarMvRRwb8Z0zhFgvReJnup3F3Z4mxxFDqVTVOCk:+we4t3vDwbU01Fi4uxQmXUVTzk

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1db17cce7fad2a8aea9f04bba51a1076.exe
    "C:\Users\Admin\AppData\Local\Temp\1db17cce7fad2a8aea9f04bba51a1076.exe"
    1⤵
      PID:4356
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4356 -s 324
        2⤵
        • Program crash
        PID:4764
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4356 -s 604
        2⤵
        • Program crash
        PID:5620
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4356 -ip 4356
      1⤵
        PID:5544
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4356 -ip 4356
        1⤵
          PID:5268

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4356-0-0x0000000000400000-0x0000000000576000-memory.dmp

          Filesize

          1.5MB

        • memory/4356-1-0x0000000000A60000-0x0000000000AB4000-memory.dmp

          Filesize

          336KB

        • memory/4356-36-0x00000000024E0000-0x00000000024E1000-memory.dmp

          Filesize

          4KB

        • memory/4356-50-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-51-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-55-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-63-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-62-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-61-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-60-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-87-0x0000000000400000-0x0000000000576000-memory.dmp

          Filesize

          1.5MB

        • memory/4356-59-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-58-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-57-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-56-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-54-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-53-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-52-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-49-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-48-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-47-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-46-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-45-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-44-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-43-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-42-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-40-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-41-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-39-0x0000000002510000-0x0000000002511000-memory.dmp

          Filesize

          4KB

        • memory/4356-38-0x00000000024B0000-0x00000000024B1000-memory.dmp

          Filesize

          4KB

        • memory/4356-37-0x00000000024C0000-0x00000000024C1000-memory.dmp

          Filesize

          4KB

        • memory/4356-35-0x0000000002500000-0x0000000002501000-memory.dmp

          Filesize

          4KB

        • memory/4356-34-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-33-0x0000000002420000-0x0000000002421000-memory.dmp

          Filesize

          4KB

        • memory/4356-32-0x0000000002490000-0x0000000002491000-memory.dmp

          Filesize

          4KB

        • memory/4356-31-0x0000000002460000-0x0000000002461000-memory.dmp

          Filesize

          4KB

        • memory/4356-30-0x0000000002470000-0x0000000002471000-memory.dmp

          Filesize

          4KB

        • memory/4356-29-0x0000000002400000-0x0000000002401000-memory.dmp

          Filesize

          4KB

        • memory/4356-28-0x0000000002410000-0x0000000002411000-memory.dmp

          Filesize

          4KB

        • memory/4356-27-0x0000000002480000-0x0000000002481000-memory.dmp

          Filesize

          4KB

        • memory/4356-26-0x0000000002430000-0x0000000002431000-memory.dmp

          Filesize

          4KB

        • memory/4356-25-0x0000000002450000-0x0000000002451000-memory.dmp

          Filesize

          4KB

        • memory/4356-24-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-23-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-22-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-21-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-20-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-19-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-18-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-17-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-16-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-15-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-14-0x00000000023E0000-0x00000000023E1000-memory.dmp

          Filesize

          4KB

        • memory/4356-13-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-12-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-11-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-10-0x00000000033F0000-0x000000000340B000-memory.dmp

          Filesize

          108KB

        • memory/4356-9-0x0000000003400000-0x0000000003401000-memory.dmp

          Filesize

          4KB

        • memory/4356-7-0x00000000023B0000-0x00000000023B1000-memory.dmp

          Filesize

          4KB

        • memory/4356-8-0x0000000003400000-0x0000000003401000-memory.dmp

          Filesize

          4KB

        • memory/4356-6-0x00000000023C0000-0x00000000023C1000-memory.dmp

          Filesize

          4KB

        • memory/4356-5-0x0000000000A50000-0x0000000000A51000-memory.dmp

          Filesize

          4KB

        • memory/4356-4-0x0000000002360000-0x0000000002361000-memory.dmp

          Filesize

          4KB

        • memory/4356-3-0x00000000023D0000-0x00000000023D1000-memory.dmp

          Filesize

          4KB

        • memory/4356-2-0x0000000002380000-0x0000000002381000-memory.dmp

          Filesize

          4KB