Analysis

  • max time kernel
    90s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-01-2024 22:09

General

  • Target

    K-MetaSearch Engine Version 3.0 个人版/Server/服务器.exe

  • Size

    248KB

  • MD5

    c9c44f7d7084a9d08a278c420b5efb90

  • SHA1

    77dd9e124a07779840de9a1ea0233c36f0519357

  • SHA256

    ea6ba153b925c59d3c7e4183d4c996588b6df6c3211b66e58302a704e47229c4

  • SHA512

    73f265c05fd039bc5a75e67f165d89cd421ca6270757d593413cc8f25c41fd5e30c323bfb18dd4d74a467e9f515be6a836c373a4a173edff8082dcf28aac8945

  • SSDEEP

    6144:9kEVugeFB8p48000LFirGm7zZsoIqClbwnRcY3rHuJnmV0:9ZugeFB6CFirGm7znINwnRcY3rHuJnmS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\K-MetaSearch Engine Version 3.0 个人版\Server\服务器.exe
    "C:\Users\Admin\AppData\Local\Temp\K-MetaSearch Engine Version 3.0 个人版\Server\服务器.exe"
    1⤵
      PID:1196
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1196 -s 500
        2⤵
        • Program crash
        PID:3804
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1196 -ip 1196
      1⤵
        PID:4820

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1196-0-0x0000000000400000-0x0000000000448000-memory.dmp

        Filesize

        288KB