Overview

overview

3

Static

static

3

20165d2dc5...7f.exe

windows7-x64

3

20165d2dc5...7f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 23:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20165d2dc5cf663eb0f888fe4aea9f7f.exe

  • Size

    118KB

  • MD5

    20165d2dc5cf663eb0f888fe4aea9f7f

  • SHA1

    0b25999e86e72353a0b2cb6565fcd25e118d61c5

  • SHA256

    c29c6ebc3aa3e8e0f1b2241b0b087beeca7fe32b19a33a7a0c7dc948b28fcfe4

  • SHA512

    136050c119e003bb2e339174b1d130844eee6609519725dd9b76eea20e71bd604a75bf694d2bf50c796f053cc662efa329284c326994559d63e2b97247b99232

  • SSDEEP

    3072:isEfQt2wPS/clOKlVtJW0clUHInrquIk5fhK3ZSmvZEs:hEfmV+0DMllUHIrTRhKvvZd

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20165d2dc5cf663eb0f888fe4aea9f7f.exe
    "C:\Users\Admin\AppData\Local\Temp\20165d2dc5cf663eb0f888fe4aea9f7f.exe"
    1⤵
      PID:2868
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2868 -s 228
        2⤵
        • Program crash
        PID:4488
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2868 -ip 2868
      1⤵
        PID:1336

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2868-0-0x0000000000400000-0x000000000044F000-memory.dmp

        Filesize

        316KB

        Download

      • memory/2868-1-0x0000000000400000-0x000000000044F000-memory.dmp

        Filesize

        316KB

        Download