Analysis

  • max time kernel
    139s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-01-2024 23:04

General

  • Target

    262f8a0bec693fefee2b30858530582d1d066c8200c32d2a14f8d745cba13235.exe

  • Size

    3.2MB

  • MD5

    104b83c9417e07744a6cdd4194cedf21

  • SHA1

    6ee89863f8ffa2d8073b221f1bae459e035d6796

  • SHA256

    262f8a0bec693fefee2b30858530582d1d066c8200c32d2a14f8d745cba13235

  • SHA512

    2be562aeb76712f7b9805da1df6e441727295034001e1536cfdc49a3462021ec6d9d7d32671f48412f80196dade0b3d0e047a67b5369cb61f1d3cb61352180cd

  • SSDEEP

    49152:SB/uh4nsDQXxfNw/zwzpUpBQJ5XbLu2QujWm9qZdxjKt+w0987dgmWMn:SB/g4sUxfNUILJd8ljIt+t27dgfk

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\262f8a0bec693fefee2b30858530582d1d066c8200c32d2a14f8d745cba13235.exe
    "C:\Users\Admin\AppData\Local\Temp\262f8a0bec693fefee2b30858530582d1d066c8200c32d2a14f8d745cba13235.exe"
    1⤵
      PID:2784
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 1112
        2⤵
        • Program crash
        PID:3444
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2784 -ip 2784
      1⤵
        PID:2616

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2784-0-0x0000000074AC0000-0x0000000075270000-memory.dmp

        Filesize

        7.7MB

      • memory/2784-1-0x00000000003A0000-0x00000000006E6000-memory.dmp

        Filesize

        3.3MB

      • memory/2784-2-0x000000000B740000-0x000000000C5C8000-memory.dmp

        Filesize

        14.5MB

      • memory/2784-3-0x000000000C5D0000-0x000000000C66C000-memory.dmp

        Filesize

        624KB

      • memory/2784-4-0x000000000CC20000-0x000000000D1C4000-memory.dmp

        Filesize

        5.6MB

      • memory/2784-5-0x000000000C670000-0x000000000C702000-memory.dmp

        Filesize

        584KB

      • memory/2784-6-0x0000000002AE0000-0x0000000002AF0000-memory.dmp

        Filesize

        64KB

      • memory/2784-7-0x0000000005130000-0x000000000513A000-memory.dmp

        Filesize

        40KB

      • memory/2784-8-0x000000000C800000-0x000000000C856000-memory.dmp

        Filesize

        344KB

      • memory/2784-9-0x0000000074AC0000-0x0000000075270000-memory.dmp

        Filesize

        7.7MB