Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/02/2024, 21:33

General

  • Target

    f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe

  • Size

    1.7MB

  • MD5

    2a9c1d26656d18f3366a7f7087d7c6ab

  • SHA1

    b26368184e1022fab251d1144f014db860740d64

  • SHA256

    f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f

  • SHA512

    1c25a8b32dd70f25bf29b9d6f56211d0557017ea58ca3ca4966039baf2e07d6ca06016b06056f199a49d3440d553b0465cc9b62dd298c6d9842a0deb99c5c3e8

  • SSDEEP

    12288:QUF30Ngj44ecDyfOkx2LIaB4CWKKCrZTGF/k8uMxtxPvvzphT:QU50d4ecWfOkx2LFBJbKkKF/eMNPjphT

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe
    "C:\Users\Admin\AppData\Local\Temp\f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe"
    1⤵
      PID:1152
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 416
        2⤵
        • Program crash
        PID:3060
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1152 -ip 1152
      1⤵
        PID:4492

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1152-0-0x0000000000FD0000-0x0000000001039000-memory.dmp

        Filesize

        420KB