Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-03-2024 12:27

General

  • Target

    d61d0abd67faa11961cbd9c3e3c2cf17.exe

  • Size

    501KB

  • MD5

    d61d0abd67faa11961cbd9c3e3c2cf17

  • SHA1

    1607d74f72564dcef7643eabe8df816ccb947ddc

  • SHA256

    45548276619848f7b73ef513b90598a9a253e80900a33599bfab8d1c5d7ef464

  • SHA512

    7e5aa2d3f5fbec4333ec85a1460e0e84b356db6a43c0d7c28b8590cccbf96d68edaa576464e591b0d5653aff3034cd8681e22bb17007e87e63e54f365dee7db9

  • SSDEEP

    6144:cl81M+bAyKBG95/1/LbgbBXn3RgjaqLlOsJXDuHCtkkpwBLGTOLZNr5uv+5drArm:iiXbBKBw/1/nSap4YKTLGTOLpeOA7W

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d61d0abd67faa11961cbd9c3e3c2cf17.exe
    "C:\Users\Admin\AppData\Local\Temp\d61d0abd67faa11961cbd9c3e3c2cf17.exe"
    1⤵
      PID:2412
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 536
        2⤵
        • Program crash
        PID:4484
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 572
        2⤵
        • Program crash
        PID:2496
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2412 -ip 2412
      1⤵
        PID:5076
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2412 -ip 2412
        1⤵
          PID:4212

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2412-3-0x0000000000610000-0x0000000000710000-memory.dmp

          Filesize

          1024KB