Analysis
- max time kernel
143s - max time network
168s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
18/05/2023, 13:46
General
- Target 1fa4e8b515f26aa53d2feb59cbf0932b55063e4c0420d5df4f849cfb281868e7.exe
- Size 360KB
- Sample230518-q24afabe27
- SHA256 1fa4e8b515f26aa53d2feb59cbf0932b55063e4c0420d5df4f849cfb281868e7
Malware Config
Signatures
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fa4e8b515f26aa53d2feb59cbf0932b55063e4c0420d5df4f849cfb281868e7.exe"C:\Users\Admin\AppData\Local\Temp\1fa4e8b515f26aa53d2feb59cbf0932b55063e4c0420d5df4f849cfb281868e7.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1488 -s 10882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 1488 -ip 14881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1488-134-0x0000000000AB0000-0x0000000000AEE000-memory.dmp
memory/1488-135-0x0000000000400000-0x000000000091E000-memory.dmp
memory/1488-136-0x0000000000AB0000-0x0000000000AEE000-memory.dmp
memory/1488-137-0x0000000002A00000-0x0000000002A10000-memory.dmp
memory/1488-138-0x0000000000400000-0x000000000091E000-memory.dmp
memory/1488-139-0x0000000002A00000-0x0000000002A10000-memory.dmp
memory/1488-140-0x0000000002A00000-0x0000000002A10000-memory.dmp
memory/1488-141-0x0000000005170000-0x0000000005714000-memory.dmp
memory/1488-143-0x0000000002A00000-0x0000000002A10000-memory.dmp
memory/1488-144-0x0000000005720000-0x00000000057B2000-memory.dmp
memory/1488-145-0x0000000002A00000-0x0000000002A10000-memory.dmp
memory/1488-147-0x0000000000400000-0x000000000091E000-memory.dmp