Overview

overview

8

Static

static

3

09acbc29a7...45.exe

windows7-x64

8

09acbc29a7...45.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    110s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 01:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    09acbc29a773770217696c4ff0e96a45.exe

  • Size

    92KB

  • MD5

    09acbc29a773770217696c4ff0e96a45

  • SHA1

    21a967bdcefa1ce3d2df38d7bf426ac2cec452db

  • SHA256

    a13c5b159b96a1a270a260617edce66c7a13cdd85ee3406032c25cdf1b3bf669

  • SHA512

    be2f7b817b13083323d7fbc67a42fe6d65766b64503a2361108a8856396a7aae863445d6e47c624603f9348ca68da3a8c758592bc01b7e22773436d7e23b7d97

  • SSDEEP

    1536:MpuOO/aZ4LR8LbtoUVuRG5etgBaxXmB+EoC+1xv9tqGNiNW0Ne+zYJXza:MpPO/xLR8LbtVIAeCoC+D10NWy0Xu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\09acbc29a773770217696c4ff0e96a45.exe
    "C:\Users\Admin\AppData\Local\Temp\09acbc29a773770217696c4ff0e96a45.exe"
    1⤵
      PID:3064
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 308
        2⤵
        • Program crash
        PID:5000
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3064 -ip 3064
      1⤵
        PID:1132

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3064-7-0x0000000000C50000-0x0000000000C60000-memory.dmp
        Filesize

        64KB

        Download