Overview

overview

3

Static

static

3

3f38a6b5ce...ee.exe

windows7-x64

3

3f38a6b5ce...ee.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 22:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3f38a6b5ce1c06bc66177c5148c2d9ee.exe

  • Size

    1.8MB

  • MD5

    3f38a6b5ce1c06bc66177c5148c2d9ee

  • SHA1

    5ad2ed9b4679bb22f8fc97a55660e92aa2d610b4

  • SHA256

    16a536b0f7df09e7a942c506ed76f35c2eec0f8bfb5681aeb1504b990ffffc71

  • SHA512

    73f57b7c06acd2c7a26655233c5880c8172b160a4282424e674894c6513478e4bfac08b604b16fa517f84225c987a93f08dba65c6728a57500694bfbb76b1c46

  • SSDEEP

    24576:RxYhRHr3bcNSmL7+ldhtyq9tAehagxm+SF+H+4MOqlUbBN7arJ3O3:RxYhRLLcomO/yutA2xm+x+4glqBNY3S

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f38a6b5ce1c06bc66177c5148c2d9ee.exe
    "C:\Users\Admin\AppData\Local\Temp\3f38a6b5ce1c06bc66177c5148c2d9ee.exe"
    1⤵
      PID:3052
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3052 -s 192
        2⤵
        • Program crash
        PID:3368
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 3052 -ip 3052
      1⤵
        PID:2592

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3052-0-0x0000000000400000-0x00000000005D7000-memory.dmp

              Filesize

              1.8MB

              Download

            • memory/3052-1-0x0000000000400000-0x00000000005D7000-memory.dmp

              Filesize

              1.8MB

              Download