Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 11:59

General

  • Target

    17cb17eb2bbc23b786d194e3199e419e.exe

  • Size

    732KB

  • MD5

    17cb17eb2bbc23b786d194e3199e419e

  • SHA1

    1cb014c53385e60adeb79a06d0a5fe0614bab399

  • SHA256

    831032139510a09994b1500ad16013641519dce287f9adb6241b6ee0b8a1f578

  • SHA512

    581cc5a52106587dce2647b79cc0f6edde3d492c9c2c2fa6b3e53b7a8ad24a4d3327e42a3899ff7f61a289eb034e0e33d4a5d7541d68f2c1552a60c450ab227d

  • SSDEEP

    12288:UShKg8H5btg8d3ZsurFQrfiLXK6duSs2dsED9sXz3B+fR+/9C7E7h8z5dRkT0d+Q:H8Z/3nBQj6b421a+5+wYadLLRz5C2H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe
    "C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe"
    1⤵
      PID:2944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 312
        2⤵
        • Program crash
        PID:2608
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2944 -ip 2944
      1⤵
        PID:2680

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2944-1-0x0000000000400000-0x00000000005C5000-memory.dmp

        Filesize

        1.8MB

      • memory/2944-0-0x0000000000400000-0x00000000005C5000-memory.dmp

        Filesize

        1.8MB

      • memory/2944-2-0x0000000000400000-0x00000000005C5000-memory.dmp

        Filesize

        1.8MB

      • memory/2944-3-0x0000000000400000-0x00000000005C5000-memory.dmp

        Filesize

        1.8MB