Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 08:39

General

  • Target

    744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe

  • Size

    498KB

  • MD5

    26ac38bd13eddf61277f7302563454ff

  • SHA1

    01ac4a03767ed0335dd0b3e0e97689c11350ae8d

  • SHA256

    744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422

  • SHA512

    c0171429df12ed285de6c3b31fb924f7f046653ad49b975f99cbe1f9523a6526924ad8d7bcdc583c039b9e846781135094037958c12c4c16f6a69de1927ff5cd

  • SSDEEP

    6144:fw8TFcuzqCOxayoQmo+4SkZjKb8XiRWzcD8uNnViHRJDvWqTba8gc:omzzLOxaysDSXzXuNVUDvWu28

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe
    "C:\Users\Admin\AppData\Local\Temp\744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe"
    1⤵
      PID:4052
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 936
        2⤵
        • Program crash
        PID:2876
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4052 -ip 4052
      1⤵
        PID:3176

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4052-2-0x00000000027C0000-0x0000000002810000-memory.dmp

        Filesize

        320KB

      • memory/4052-1-0x0000000002810000-0x0000000002910000-memory.dmp

        Filesize

        1024KB

      • memory/4052-3-0x00000000045F0000-0x0000000004656000-memory.dmp

        Filesize

        408KB

      • memory/4052-4-0x0000000000400000-0x00000000025D0000-memory.dmp

        Filesize

        33.8MB

      • memory/4052-6-0x0000000006F60000-0x0000000006F70000-memory.dmp

        Filesize

        64KB

      • memory/4052-5-0x0000000006F60000-0x0000000006F70000-memory.dmp

        Filesize

        64KB

      • memory/4052-7-0x0000000006F70000-0x0000000007514000-memory.dmp

        Filesize

        5.6MB

      • memory/4052-8-0x0000000074280000-0x0000000074A30000-memory.dmp

        Filesize

        7.7MB

      • memory/4052-9-0x0000000006E70000-0x0000000006ED2000-memory.dmp

        Filesize

        392KB

      • memory/4052-10-0x0000000007520000-0x00000000075B2000-memory.dmp

        Filesize

        584KB

      • memory/4052-13-0x00000000027C0000-0x0000000002810000-memory.dmp

        Filesize

        320KB

      • memory/4052-12-0x0000000000400000-0x00000000025D0000-memory.dmp

        Filesize

        33.8MB

      • memory/4052-14-0x0000000074280000-0x0000000074A30000-memory.dmp

        Filesize

        7.7MB