Analysis
- max time kernel
131s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
- submitted
05/10/2023, 17:53
General
- Target e9f5cf469606763d6ad1944875076e4d.exe
- Size 343KB
- Sample231005-wgaehsfe46
- SHA256 8cf2e3fd2a1f2522870ac61dc4496433c9700b389768d4b6ef75e905cf5f3421
Malware Config
Signatures
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9f5cf469606763d6ad1944875076e4d.exe"C:\Users\Admin\AppData\Local\Temp\e9f5cf469606763d6ad1944875076e4d.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 11282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4392 -ip 43921⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4392-1-0x00000000007F0000-0x00000000008F0000-memory.dmp
memory/4392-2-0x0000000000770000-0x00000000007C0000-memory.dmp
memory/4392-3-0x0000000000400000-0x00000000005CD000-memory.dmp
memory/4392-4-0x0000000002600000-0x0000000002666000-memory.dmp
memory/4392-5-0x0000000074450000-0x0000000074C00000-memory.dmp
memory/4392-6-0x0000000004F10000-0x0000000004F20000-memory.dmp
memory/4392-7-0x0000000004F10000-0x0000000004F20000-memory.dmp
memory/4392-8-0x0000000005020000-0x00000000055C4000-memory.dmp
memory/4392-9-0x00000000027B0000-0x0000000002812000-memory.dmp
memory/4392-10-0x0000000002A30000-0x0000000002AC2000-memory.dmp
memory/4392-11-0x00000000007F0000-0x00000000008F0000-memory.dmp
memory/4392-12-0x0000000000770000-0x00000000007C0000-memory.dmp
memory/4392-13-0x0000000000400000-0x00000000005CD000-memory.dmp
memory/4392-14-0x0000000074450000-0x0000000074C00000-memory.dmp
memory/4392-16-0x0000000000400000-0x00000000005CD000-memory.dmp
memory/4392-17-0x0000000074450000-0x0000000074C00000-memory.dmp