Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/09/2023, 23:04

General

  • Target

    3e6b8bd8046a8967ef844cb3bc79deec63c8e448dace78dbc8d552a08b43b8ad.exe

  • Size

    1.4MB

  • MD5

    366f9a685d50d6df6c0e5a045d676549

  • SHA1

    a453c5376665018da5380953f494cc20767edef6

  • SHA256

    3e6b8bd8046a8967ef844cb3bc79deec63c8e448dace78dbc8d552a08b43b8ad

  • SHA512

    abcc71990b54f69d0c31fa323c3895f6d8ab04a2aaaa1094bd3a87cccdfae38cd408b9f481b79e37510d0827ddc455342029ecff9339f34e40d83ef765278ff9

  • SSDEEP

    24576:aW5BqT7NVDgtdSSo0BKys+6pRQP7xSk4dqnNVOYTbHKXP:n5Bqf7DwEvys+61dqNVOYTW/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e6b8bd8046a8967ef844cb3bc79deec63c8e448dace78dbc8d552a08b43b8ad.exe
    "C:\Users\Admin\AppData\Local\Temp\3e6b8bd8046a8967ef844cb3bc79deec63c8e448dace78dbc8d552a08b43b8ad.exe"
    1⤵
      PID:468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 468 -s 552
        2⤵
        • Program crash
        PID:4556
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 468 -ip 468
      1⤵
        PID:4844

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/468-0-0x0000000000400000-0x00000000005D3000-memory.dmp

        Filesize

        1.8MB

      • memory/468-1-0x00000000771D0000-0x00000000773E5000-memory.dmp

        Filesize

        2.1MB

      • memory/468-3875-0x0000000000400000-0x00000000005D3000-memory.dmp

        Filesize

        1.8MB