Analysis

  • max time kernel
    132s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-01-2024 14:29

General

  • Target

    4939e3970031f5fa049b2fae68069b52.exe

  • Size

    4.5MB

  • MD5

    4939e3970031f5fa049b2fae68069b52

  • SHA1

    758e7a8c35d3a0503191bb1272a9a97e88be6544

  • SHA256

    693c98209d73e643781f4c8b0b143d61143c8f256f479311def7cbadbee1888e

  • SHA512

    caddf036d6826d6a7ff353ae556a78941b5990982409c35b46887ac3ace2432af43b93fe3194a339e392af4527e49ff928bd8d53ed2928b45bb113ae2d40e24c

  • SSDEEP

    98304:vU1FB2INAL29YBwDKeEoGBAcxpba5mgWUZMXfCcNn6w4GZwAGPzx:vUTK29LOroZyamvUZMXfrN6w4G6xzx

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4939e3970031f5fa049b2fae68069b52.exe
    "C:\Users\Admin\AppData\Local\Temp\4939e3970031f5fa049b2fae68069b52.exe"
    1⤵
      PID:3916
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 572
        2⤵
        • Program crash
        PID:3600
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 572
        2⤵
        • Program crash
        PID:3908
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3916 -ip 3916
      1⤵
        PID:1140
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 3916 -ip 3916
        1⤵
          PID:3544

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3916-0-0x0000000000400000-0x0000000001E2E000-memory.dmp

          Filesize

          26.2MB

        • memory/3916-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3916-10-0x0000000000400000-0x0000000001E2E000-memory.dmp

          Filesize

          26.2MB

        • memory/3916-11-0x0000000000400000-0x0000000001E2E000-memory.dmp

          Filesize

          26.2MB

        • memory/3916-13-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB