Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-03-2024 02:51

General

  • Target

    c836fa8942e3a26fd68bf4de736d4758f3531efc8ec38510e0216d7df2bd7ef1.exe

  • Size

    55KB

  • MD5

    e43fcf60b434a68344d602cce5e32b2b

  • SHA1

    69d09236b07a58d336f1dff4142b3709d5e30216

  • SHA256

    c836fa8942e3a26fd68bf4de736d4758f3531efc8ec38510e0216d7df2bd7ef1

  • SHA512

    8a691c0b0c88230da89e0c0e1c2e0873ad6974535692962183fcac1e83fc52c591d583de83d967a8bfcbf6c69f09d6de9bb8fc9553cbad1c39a7d1eff8c0c0eb

  • SSDEEP

    48:cUDdjByfFGxOgw4txVrAus1hQqEktq17RZ/Q3WVLLm:7D+tKOqtHAusyaG

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c836fa8942e3a26fd68bf4de736d4758f3531efc8ec38510e0216d7df2bd7ef1.exe
    "C:\Users\Admin\AppData\Local\Temp\c836fa8942e3a26fd68bf4de736d4758f3531efc8ec38510e0216d7df2bd7ef1.exe"
    1⤵
      PID:6140
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 6140 -s 236
        2⤵
        • Program crash
        PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 6140 -s 240
        2⤵
        • Program crash
        PID:5928
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 6140 -ip 6140
      1⤵
        PID:3728
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6140 -ip 6140
        1⤵
          PID:5844

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads