Overview

overview

3

Static

static

3

d3924db900...99.exe

windows7-x64

3

d3924db900...99.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    110s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/03/2024, 12:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d3924db9004bf110820acbb4db95d299.exe

  • Size

    46KB

  • MD5

    d3924db9004bf110820acbb4db95d299

  • SHA1

    cea1b892d3de5c0807a5bea02cf2d4310d5c8847

  • SHA256

    b8f17a6f244e2f58fa66d2198ac3f05598cf4916e1f244865b8ed4e35a0d0583

  • SHA512

    ebb911e606dbff2ceb537ba4b507e9f2648793d2a77fa43d47bfe03e84155b47d5cb47d951ff8aebdd25ac1a5edf10d5b43a19fc4edc418daa913239fc4a4119

  • SSDEEP

    768:iTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/5GDQgHlhFVO4it:iLIcNTcWATPuhI9hGDHltpu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d3924db9004bf110820acbb4db95d299.exe
    "C:\Users\Admin\AppData\Local\Temp\d3924db9004bf110820acbb4db95d299.exe"
    1⤵
      PID:3356
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3356 -s 268
        2⤵
        • Program crash
        PID:1652
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3356 -ip 3356
      1⤵
        PID:3984

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3356-0-0x0000000000400000-0x0000000000420000-memory.dmp

        Filesize

        128KB

        Download

      • memory/3356-1-0x0000000000400000-0x0000000000420000-memory.dmp

        Filesize

        128KB

        Download