Overview

overview

3

Static

static

3

1895fa2e22...fc.exe

windows7-x64

1

1895fa2e22...fc.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    151s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 12:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    1895fa2e2252068cfcaa78464e9e88fc.exe

  • Size

    749KB

  • MD5

    1895fa2e2252068cfcaa78464e9e88fc

  • SHA1

    acb67764bcff488fea018b19fa7a16389ca3e93d

  • SHA256

    ce63f5883e9bd9ece8bb4d866fa3e5752bc4987b92b062e7fda4ceae70750811

  • SHA512

    3354801452b8d6e701f3eb90dcf19f8e3dcba88b447efb3f5cd7b3ff0af6c65b9a8681cfd7741619608a3b2b6c83f056140e5ac21edb788e9895cb8ee1ccd2ee

  • SSDEEP

    12288:nw+1zlXEcEVvsoRGiZ9WvCx/QAy+o9exJp3VcbrPJpjjblv6u5CZZFoVXS1vPVsI:nRZzEdso0iZ9WvBAyX0hFcbLJ1jZvvor

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1895fa2e2252068cfcaa78464e9e88fc.exe
    "C:\Users\Admin\AppData\Local\Temp\1895fa2e2252068cfcaa78464e9e88fc.exe"
    1⤵
      PID:3976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3976 -s 544
        2⤵
        • Program crash
        PID:456
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3976 -s 544
        2⤵
        • Program crash
        PID:4596
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3976 -ip 3976
      1⤵
        PID:2540
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3976 -ip 3976
        1⤵
          PID:3028

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/3976-4-0x0000000002350000-0x00000000023F1000-memory.dmp

                Filesize

                644KB

                Download

              • memory/3976-5-0x0000000000400000-0x00000000004C2000-memory.dmp

                Filesize

                776KB

                Download