Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
11/03/2024, 19:52
General
- Target c174d727b8d90c79e813adabbc44bd80.exe
- Size 668KB
- Sample240311-yllpfsef92
- SHA256 ad3ff34543b89a808db0c91f297dd641fc5871b9a27fe6fab366597185f23e6d
Malware Config
Signatures
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c174d727b8d90c79e813adabbc44bd80.exe"C:\Users\Admin\AppData\Local\Temp\c174d727b8d90c79e813adabbc44bd80.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 2722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3824 -ip 38241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3824-1-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-0-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-3-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-5-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-7-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-9-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-11-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-13-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-15-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-16-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-18-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-20-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-21-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-24-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-23-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-27-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-28-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-30-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-32-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-34-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-35-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-37-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-39-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-41-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-46-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-44-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-43-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-47-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-49-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-52-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-50-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-53-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-56-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-58-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-60-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-62-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-64-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-67-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-69-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-70-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-73-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-72-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-76-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-79-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-81-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-83-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-86-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-89-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-91-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-94-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-105-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-106-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-108-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-130-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-132-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-138-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-137-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-149-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-159-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-157-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-161-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-163-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-165-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-173-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-174-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-181-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-191-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-193-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-197-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-195-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-206-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-204-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-209-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-210-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-213-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-231-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-234-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-237-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-240-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-244-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-246-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-250-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-248-0x0000000000680000-0x00000000006EC000-memory.dmp
memory/3824-258-0x0000000077D92000-0x0000000077D93000-memory.dmp
memory/3824-259-0x0000000000680000-0x00000000006EC000-memory.dmp