Analysis
- max time kernel
146s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
08/01/2024, 15:30
General
- Target 4bcd72e6661050516e7b47920e987e29.exe
- Size 368KB
- Sample240108-sxtxbaddg8
- SHA256 b893bb8c9bf72dd6d8f0d7c22a1d3d54d5d0d8a5cbb1d4d635b810b74279e5a8
Malware Config
Signatures
- Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bcd72e6661050516e7b47920e987e29.exe"C:\Users\Admin\AppData\Local\Temp\4bcd72e6661050516e7b47920e987e29.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3512 -s 5322⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3512 -s 5322⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3512 -ip 35121⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 3512 -ip 35121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3512-0-0x0000000000400000-0x0000000000474000-memory.dmp
memory/3512-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp
memory/3512-10-0x0000000000400000-0x0000000000474000-memory.dmp
memory/3512-11-0x0000000000400000-0x0000000000474000-memory.dmp
memory/3512-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp