Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 17:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7514e833de07d4eba6d4d7237d3c2d07.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
General
-
Target
7514e833de07d4eba6d4d7237d3c2d07.exe
-
Size
29KB
-
MD5
7514e833de07d4eba6d4d7237d3c2d07
-
SHA1
d1af2bb5793f84ddb90e5f80edaadd91b86f5bb8
-
SHA256
52e5fb80b1ee53b95849cefce536e41c8fd53498968aa5121384357a1b55fa58
-
SHA512
0a8434afddbd82b691347637c6e1a49beeddbf975cf066439914973ba51d17f05a416fb52bc3630c0aa6d6306c093b66339be6d3bbf6a3bdb43f589e101198ee
-
SSDEEP
768:iViKjBHSzSPxm/t2rHP4dEeFmSR7AoByvz1rT:ikiBaSPUYTy1FmSNA7vZr
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\7514e833de07d4eba6d4d7237d3c2d07.exe"C:\Users\Admin\AppData\Local\Temp\7514e833de07d4eba6d4d7237d3c2d07.exe"1⤵PID:508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 508 -s 2642⤵
- Program crash
PID:1452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 508 -ip 5081⤵PID:4412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/508-0-0x0000000000200000-0x000000000020F000-memory.dmpFilesize
60KB