Overview

overview

3

Static

static

1

a461d988d1...a2.exe

windows7-x64

3

a461d988d1...a2.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/02/2024, 17:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a461d988d1efcb86a41f3b134e30d9a2.exe

  • Size

    150KB

  • MD5

    a461d988d1efcb86a41f3b134e30d9a2

  • SHA1

    f38fb0c58dd231431845ffaecd9f5d398692d4e7

  • SHA256

    eb298bcb85ad58e2be3b5fd3ea6a20f3ea23f9c0d9bbabedfea80982aac623d4

  • SHA512

    e6a44bdcbb78210c75bfeab431a80252c2b219ecb2805aaf578cb4033625bc1430c7151920fcd89f83b4d2c61e181cc692ced2b94ef21169a02fd6fe587160fa

  • SSDEEP

    1536:X7B205YSqJ1+qpgPp44YAJOXAFRgD0Ac0Fbtc3zpE0UmFohUpJPKGtypvbykE:XA2YSy1lgPp44YmOjnb4GmuyJPHtydby

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a461d988d1efcb86a41f3b134e30d9a2.exe
    "C:\Users\Admin\AppData\Local\Temp\a461d988d1efcb86a41f3b134e30d9a2.exe"
    1⤵
      PID:3964
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3964 -s 424
        2⤵
        • Program crash
        PID:452
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3964 -ip 3964
      1⤵
        PID:4392

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3964-0-0x0000000000400000-0x00000000004255D1-memory.dmp

              Filesize

              149KB

              Download

            • memory/3964-1-0x0000000000400000-0x00000000004255D1-memory.dmp

              Filesize

              149KB

              Download