Analysis

  • max time kernel
    147s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 23:11

General

  • Target

    72bf2744ae314c1065877bbb497e3844a27573bf74a3b7fddca3b6866d542c4c.exe

  • Size

    12.6MB

  • MD5

    38849b459d6cd415d32e19a84a670bb1

  • SHA1

    876d4385f45a0700957061f109b8ad9ac62b308d

  • SHA256

    72bf2744ae314c1065877bbb497e3844a27573bf74a3b7fddca3b6866d542c4c

  • SHA512

    723b8184b40c71408e83f9c4937c903c9e47c1fec2dd5ba2f878ba55ecbdc71cb9d8f6d9c7115db07bdb8dc645997e21438a8eb47a42833ffdbdd58e7b6e16c6

  • SSDEEP

    393216:9qJ0/HapC8Wqn57M6rpTi3bh0WJkTJPAX:w6iC8jn57cLht

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72bf2744ae314c1065877bbb497e3844a27573bf74a3b7fddca3b6866d542c4c.exe
    "C:\Users\Admin\AppData\Local\Temp\72bf2744ae314c1065877bbb497e3844a27573bf74a3b7fddca3b6866d542c4c.exe"
    1⤵
      PID:4804
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 648
        2⤵
        • Program crash
        PID:2012
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4804 -ip 4804
      1⤵
        PID:4236

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4804-0-0x0000000000400000-0x00000000015AF000-memory.dmp

              Filesize

              17.7MB

            • memory/4804-1-0x0000000000400000-0x00000000015AF000-memory.dmp

              Filesize

              17.7MB

            • memory/4804-3-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-2-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-5-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-8-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-12-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-16-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-20-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-24-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-27-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-28-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-29-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-30-0x0000000004D40000-0x0000000005102000-memory.dmp

              Filesize

              3.8MB

            • memory/4804-31-0x0000000000400000-0x00000000015AF000-memory.dmp

              Filesize

              17.7MB