Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2024, 07:25

General

  • Target

    52e713aa9c4c9c8b718237724606d0b8.exe

  • Size

    170KB

  • MD5

    52e713aa9c4c9c8b718237724606d0b8

  • SHA1

    ced48258a4a7cb222703be37f4fb9bd33031d5df

  • SHA256

    d54f44fd33420ab8fbc53709a7fed3e9a1701a6e83e4f322b372ddacfb4c35dc

  • SHA512

    19d196af57ebd22ba99fb3f0505f994258471f60c3eee88c1770f6b1db0de8352cda7fb552abe87a5322b80cf1647bd362f550213f46a52ec16aa5909a203192

  • SSDEEP

    3072:osUkgsRKe4cps3i6zsZzAgzsoQGSNXbxnhsF+fX5KX/qnpdwbP:9UJ+Ka6dsNB1QnbxhsmkX/s4

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\52e713aa9c4c9c8b718237724606d0b8.exe
    "C:\Users\Admin\AppData\Local\Temp\52e713aa9c4c9c8b718237724606d0b8.exe"
    1⤵
      PID:3712
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3712 -s 552
        2⤵
        • Program crash
        PID:2592
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3712 -s 568
        2⤵
        • Program crash
        PID:2280
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3712 -ip 3712
      1⤵
        PID:384
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3712 -ip 3712
        1⤵
          PID:3156

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3712-0-0x0000000000400000-0x0000000000411000-memory.dmp

          Filesize

          68KB

        • memory/3712-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3712-10-0x0000000000400000-0x0000000000411000-memory.dmp

          Filesize

          68KB

        • memory/3712-11-0x0000000000400000-0x0000000000411000-memory.dmp

          Filesize

          68KB

        • memory/3712-12-0x0000000000400000-0x0000000000411000-memory.dmp

          Filesize

          68KB

        • memory/3712-13-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB