Analysis

  • max time kernel
    215s
  • max time network
    297s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 08:29

General

  • Target

    LANC v2.exe

  • Size

    321KB

  • MD5

    f594847c2e806183624275d877acf069

  • SHA1

    f5a547ec6dc47fb2e297539a6d6ec55e4c9bd87b

  • SHA256

    5d600c4a17065f936875f00cfddf0f04b78ca49d68596025bb9512d81bcbc766

  • SHA512

    7b768def9bd6de863f3b7361ca8339b2dda9619dc4953f39b0cf7a2add017ceed164d430ae6ff274f6125b072cd020687329e1bcb3bee8f886fb72b4f1dd5e1c

  • SSDEEP

    6144:ar11SDM1s5hc0DQPDeyUYbG2SlL8sWyEnh1SDM1s5hc0DQPDeyUYbG2Sl:41R1eyDeDdlQnhR1eyDeDdl

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LANC v2.exe
    "C:\Users\Admin\AppData\Local\Temp\LANC v2.exe"
    1⤵
      PID:996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 996 -s 944
        2⤵
        • Program crash
        PID:3956
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 996 -ip 996
      1⤵
        PID:2608

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/996-0-0x0000000000140000-0x0000000000196000-memory.dmp

        Filesize

        344KB

      • memory/996-1-0x0000000075140000-0x00000000758F0000-memory.dmp

        Filesize

        7.7MB

      • memory/996-2-0x0000000005090000-0x0000000005634000-memory.dmp

        Filesize

        5.6MB

      • memory/996-3-0x0000000075140000-0x00000000758F0000-memory.dmp

        Filesize

        7.7MB

      • memory/996-4-0x0000000004CC0000-0x0000000004D52000-memory.dmp

        Filesize

        584KB

      • memory/996-5-0x0000000004C50000-0x0000000004C65000-memory.dmp

        Filesize

        84KB

      • memory/996-6-0x0000000075140000-0x00000000758F0000-memory.dmp

        Filesize

        7.7MB