Analysis

  • max time kernel
    143s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/03/2024, 03:52

General

  • Target

    ba712dc759e2b5ff0cc89a7df3702f2a.exe

  • Size

    27.8MB

  • MD5

    ba712dc759e2b5ff0cc89a7df3702f2a

  • SHA1

    664428988af7666d3bb12709e5d89369d48edb19

  • SHA256

    c4e22d5b376632e03b43ef1e9a5b74da0b5bc1f01f9061c4191a137c28e8dd8d

  • SHA512

    988c2e099a18860388d5933c43570c18c819ca583c124cdf29872706724b40d7072afc0c2569e2e5f5640fa3d4bb83f2f3d39f988e3ebc81f9c208f99c5c0499

  • SSDEEP

    196608:DMct4b/pCBnvjeApaAvktMzmMnglrB3ytPqVxUQVmBDTSWhkb8JkJY:zt4bINvjtIAvkKn80PqbsBDTibDY

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ba712dc759e2b5ff0cc89a7df3702f2a.exe
    "C:\Users\Admin\AppData\Local\Temp\ba712dc759e2b5ff0cc89a7df3702f2a.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2064
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 476
      2⤵
      • Program crash
      PID:4608
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2064 -ip 2064
    1⤵
      PID:1052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\7-Zip\7-zip.chm

      Filesize

      9.7MB

      MD5

      335835eb9e68ea4a6444267f8f33fb46

      SHA1

      dd2e5b1215d70f051387f572c886edc6d3f485cd

      SHA256

      be45b1615438d51c6f1e495202a9d1c5ef3c9532be9306f5b48673109ba742f6

      SHA512

      1dd0ae64eb922f59974a722f6bb50ce9d367c4ba2a7d51e7e4a83b493a15b98770831ed00cdf9a8a465f079973ce8a86325337727b1d6dc4b31dbe99dfdd771b

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dll

      Filesize

      5B

      MD5

      b5b682b742431a52ea8b17c72ad9c572

      SHA1

      326320f469235708c59f678c9a7357dca552d306

      SHA256

      30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

      SHA512

      4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

    • memory/2064-0-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/2064-222-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB