Analysis
-
max time kernel
136s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 02:03
General
-
Target
0b078bb89f3d0e8e7da95c9da9576532.exe
-
Size
220KB
-
MD5
0b078bb89f3d0e8e7da95c9da9576532
-
SHA1
64a465a611592b39b9fe0e4347b30a3d9360458a
-
SHA256
bf905c5be1eb068012f8315acbc305e553274f7aca0baa2518791bea72716787
-
SHA512
8f0e9057491ce9f01887ddfaa39d45eeced32bbc39ce6a89a6d88cc1b55dd73d11de7f7eb2e02add93a5c41b86223c6d2a18994f3621080c47f2dd796e761d57
-
SSDEEP
6144:SnT5XJy0zBZNQFU6ubX9CpSvByzvB2HwMuDPGZkMRe1+fs:SRJyXEXEp4yzvBNPGZlR1s
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b078bb89f3d0e8e7da95c9da9576532.exe"C:\Users\Admin\AppData\Local\Temp\0b078bb89f3d0e8e7da95c9da9576532.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 376 -s 2202⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 376 -ip 3761⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5249a8ca762256f919be20a869eecad51
SHA149c7d9697cdb795e8116f7e869676c89dc7ac659
SHA256bbebd43ddbb39239e7a5645ec6ec594903079abab2c3e72863e70936e9cef99b
SHA5126a75d164955ad07cd22f37ccf6a356bc616e8b879f9ae5534a28534e70f4340d453062b3b8ac778d6cdf83f07917528f282f7c0be4ddb1f4c15ff855aa7b40cd
-
Filesize
452KB
-
Filesize
4KB
-
Filesize
452KB
-
Filesize
452KB