Analysis

  • max time kernel
    88s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/02/2024, 10:01

General

  • Target

    9b60fafa99a94469e781b61054be6427.exe

  • Size

    492KB

  • MD5

    9b60fafa99a94469e781b61054be6427

  • SHA1

    62638e873528420b631ddf8090af4a3666ad2d30

  • SHA256

    5c22947a9c5e6bb22e4c0fbc7a354561cdbbda6170cd0d9f853a8f151c2efbe3

  • SHA512

    c3b2efa18b00bb470f501cae73e3b84f72ffe688a82880b42330ece6323d8ef47d0c9a9273d0bf1c0b1725026c33847cd474b5d64a82db2caed1aabd32cbb1ec

  • SSDEEP

    12288:FlHXC2jrdHOCwGkvoI20nbMpk4fAqp/C4FMYJku1q0Usw:bHXBjrwCwGkwOnwgq9bau11Uz

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b60fafa99a94469e781b61054be6427.exe
    "C:\Users\Admin\AppData\Local\Temp\9b60fafa99a94469e781b61054be6427.exe"
    1⤵
      PID:3672
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3672 -s 572
        2⤵
        • Program crash
        PID:2964
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3672 -s 592
        2⤵
        • Program crash
        PID:4924
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3672 -ip 3672
      1⤵
        PID:232
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 3672 -ip 3672
        1⤵
          PID:2616

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3672-0-0x0000000000400000-0x00000000004B9000-memory.dmp

          Filesize

          740KB

        • memory/3672-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/3672-10-0x0000000000400000-0x00000000004B9000-memory.dmp

          Filesize

          740KB

        • memory/3672-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB