Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 10:47

General

  • Target

    165b941fad488433e714553e27ebbca7.exe

  • Size

    2.3MB

  • MD5

    165b941fad488433e714553e27ebbca7

  • SHA1

    d443419952e77cc91a6975cb9b424fbce60ad273

  • SHA256

    d9b3022177c195d8ef3ff24ad179fff578e1c8bb859b614445694a7f055201dc

  • SHA512

    efefb9a432cb04c47d260c148ee9e7de7de34685bfbf363e817410a4d8fc7aa5764672385612a376f74e06f523c74ff231d3d815a33ac642142128ab8b7dee50

  • SSDEEP

    24576:ASYgTcIaSCWh1XhQcxXosdW+15K08hl5HEZDrHDuf6qPFHzsM/NpeOzGkpgbQT5L:AP0vfTi05cfHQDVaztRT5hvby87QS4K

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\165b941fad488433e714553e27ebbca7.exe
    "C:\Users\Admin\AppData\Local\Temp\165b941fad488433e714553e27ebbca7.exe"
    1⤵
      PID:2336
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 644
        2⤵
        • Program crash
        PID:1556
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2336 -ip 2336
      1⤵
        PID:996

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2336-0-0x0000000000960000-0x0000000000961000-memory.dmp

        Filesize

        4KB

      • memory/2336-1-0x0000000000400000-0x0000000000657000-memory.dmp

        Filesize

        2.3MB

      • memory/2336-2-0x0000000000400000-0x0000000000657000-memory.dmp

        Filesize

        2.3MB