Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 08:42
Behavioral task
behavioral1
Sample
2184-0-0x0000000000400000-0x000000000043D000-memory.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
General
-
Target
2184-0-0x0000000000400000-0x000000000043D000-memory.exe
-
Size
244KB
-
MD5
1c7e0ac65a53e7b621bfd7734096216a
-
SHA1
394be35d444a11178c6a99bcfbdf525ce1599cae
-
SHA256
b229953af53cd20172885e94b5453f03cd14075d31e1777333ef82818cd01f8e
-
SHA512
223042ced09b1646835ed45e526a24c2701a048aa990cb4c8878ebc9cb75dd84cb6f78f574ab1ee6c7a347beade1a5bf5bb87f37a34615a0a3f05ca37f825036
-
SSDEEP
1536:UYz/E8hW9NdYAygNlvhIoOl9SAKD7PNch1ZmmImh1ADN8blGe5SagvHLNaV8RJ3n:Um/E8k9ZjpIL+zNch12KbAwSaSpJSp8
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2184-0-0x0000000000400000-0x000000000043D000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2184-0-0x0000000000400000-0x000000000043D000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1720 -ip 17201⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1720-0-0x0000000000400000-0x000000000043D000-memory.dmpFilesize
244KB