Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
10-01-2024 02:50
General
-
Target
4f6160f4cbd3b44f0322111d254e79b9.exe
-
Size
1.5MB
-
MD5
4f6160f4cbd3b44f0322111d254e79b9
-
SHA1
9a6165dabf2fb64f87e5cb30ababc1e4007cec45
-
SHA256
71699a19ae731f8bd04d1a1e0bf6a4f2cb183fa7b9d116d7280653b28df3354f
-
SHA512
397e1c97e47eaab500c28946e0cec350b6739bc934ee33e0036f85b09c3735ad8d58e91c547792e63bc0460e37a5ab92131ea2312901f4742eb9cf69d2928ad2
-
SSDEEP
24576:wteiRa6mUX2nZB0WM0cjukL2f0wt5frvsMZ500VUbQbcjukL2Y:wtbRhmUX87030cakLs0+QMZuwUUcakLj
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f6160f4cbd3b44f0322111d254e79b9.exe"C:\Users\Admin\AppData\Local\Temp\4f6160f4cbd3b44f0322111d254e79b9.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 1682⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2308 -ip 23081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
428KB
-
Filesize
504KB
-
Filesize
428KB