Overview

overview

3

Static

static

3

aa6dd57e7d...82.exe

windows7-x64

3

aa6dd57e7d...82.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/02/2024, 23:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    aa6dd57e7dd8ea9bf2bbd8521c7de382.exe

  • Size

    302KB

  • MD5

    aa6dd57e7dd8ea9bf2bbd8521c7de382

  • SHA1

    141afdc76582eec928d0307b66edcbd4587e0425

  • SHA256

    5b5473652f597fac8bea1aae5aecf3343e914c90ff19a6fb6fd5f69e4892bb3e

  • SHA512

    ca595771b0ccbf286bab162a440240fef335f77800e4a52816ff25961f21dff2b7ed70d678c106be5cac121f99d1c2069b3071e78fd8e3a1934d0b08664720e5

  • SSDEEP

    6144:psAEM+bGxwMCLzJL7uyiZAQ23OLu6DAbV7NiNTNPXNuKH:qhxb8wNzJfuPu6DYiNB3H

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aa6dd57e7dd8ea9bf2bbd8521c7de382.exe
    "C:\Users\Admin\AppData\Local\Temp\aa6dd57e7dd8ea9bf2bbd8521c7de382.exe"
    1⤵
      PID:2864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 364
        2⤵
        • Program crash
        PID:4496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 372
        2⤵
        • Program crash
        PID:1608
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2864 -ip 2864
      1⤵
        PID:4036
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 2864 -ip 2864
        1⤵
          PID:540

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2864-0-0x0000000000400000-0x00000000004AD000-memory.dmp

                Filesize

                692KB

                Download

              • memory/2864-1-0x0000000000710000-0x0000000000711000-memory.dmp

                Filesize

                4KB

                Download

              • memory/2864-2-0x0000000000400000-0x00000000004AD000-memory.dmp

                Filesize

                692KB

                Download