Analysis
-
max time kernel
143s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
27/01/2024, 05:45
General
-
Target
796d7b1934e23131acf7d42199020586.exe
-
Size
418KB
-
MD5
796d7b1934e23131acf7d42199020586
-
SHA1
7a6ac6c44b489c9fa269a859ff4a70c50c68c846
-
SHA256
bd57459a2f276b92b03f6c1a9302bb5f8b6f4b902301be3557f182b5cad960d8
-
SHA512
ca3d3fd1f963b3529db396ecd2e3537a09f603f3faca3ec7aaa167c563ac0a5065962dd08f7fabb6644f6490e1d93438361fc567c36a9adcaff9bef3e61b2883
-
SSDEEP
12288:sY5Ymqw/87Z2ljexOX8E5AY4mof/O3oqYiQB:sY5Ymqq87ZG2OmnFW3pT
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\796d7b1934e23131acf7d42199020586.exe"C:\Users\Admin\AppData\Local\Temp\796d7b1934e23131acf7d42199020586.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: RenamesItself
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 372 -s 3842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 372 -ip 3721⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1008KB
-
Filesize
284KB
-
Filesize
52KB
-
Filesize
1008KB
-
Filesize
4KB
-
Filesize
476KB
-
Filesize
284KB
-
Filesize
4KB