Overview

overview

5

Static

static

5

b0195ba69b...6e.exe

windows7-x64

5

b0195ba69b...6e.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/04/2024, 13:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe

  • Size

    1.0MB

  • MD5

    a402a1b2187e025f4e8f791fb302a1e5

  • SHA1

    eab8402c4c752684e5bf5f3eb6ce21ac2f8fcc74

  • SHA256

    b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e

  • SHA512

    bfcc79ba4a44c1e0371665f8102aae611062fc65d48b3dc1a206eb80518958ac6684fe80d6713bc40b0a942668ec6c3a76459a2d79a0aa0d191a8d13089b3843

  • SSDEEP

    24576:6AHnh+eWsN3skA4RV1Hom2KXcmtcM4wkExDla+:Nh+ZkldoPKsacLwlx

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe
    "C:\Users\Admin\AppData\Local\Temp\b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe"
    1⤵
      PID:3944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3944 -s 532
        2⤵
        • Program crash
        PID:4364
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3944 -ip 3944
      1⤵
        PID:2588

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3944-0-0x0000000000900000-0x0000000000A09000-memory.dmp

              Filesize

              1.0MB

              Download