Overview

overview

6

Static

static

1

47649af84b...60.exe

windows7-x64

6

47649af84b...60.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 07:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    47649af84b027851d054c5f9c4bbae6a2f73efcafbe10784f6796c9a027cad60.exe

  • Size

    377KB

  • MD5

    8de4f59cac15a22c0940f6f31807e9c3

  • SHA1

    8ac4744945d4a5599f24ea7300cc00f796384c6a

  • SHA256

    47649af84b027851d054c5f9c4bbae6a2f73efcafbe10784f6796c9a027cad60

  • SHA512

    7d04e6e645f3df6259fc04a763cae89cff6adea9f9ef553441f758c19ff15b25cf31970969f35db639812962d64f1c1230ad556f9ae881a45c94b4e406d8486e

  • SSDEEP

    1536:xZRuSjWPx78i2a8i2U8i2R8i2W8i2U8i2:ZuSGxFFr+FL

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\47649af84b027851d054c5f9c4bbae6a2f73efcafbe10784f6796c9a027cad60.exe
    "C:\Users\Admin\AppData\Local\Temp\47649af84b027851d054c5f9c4bbae6a2f73efcafbe10784f6796c9a027cad60.exe"
    1⤵
      PID:2516
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 476
        2⤵
        • Program crash
        PID:4008
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 496
        2⤵
        • Program crash
        PID:4888
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2516 -ip 2516
      1⤵
        PID:4604
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2516 -ip 2516
        1⤵
          PID:3884

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2516-0-0x0000000000150000-0x00000000001B1431-memory.dmp

          Filesize

          389KB

          Download

        • memory/2516-1-0x0000000000150000-0x00000000001B1431-memory.dmp

          Filesize

          389KB

          Download