Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-04-2024 01:16

General

  • Target

    a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe

  • Size

    1.7MB

  • MD5

    e77a799ad913d2f47db9d46435ad647c

  • SHA1

    79801fa24e4b82967c68f7350c40008089b09674

  • SHA256

    a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1

  • SHA512

    b15b623e2116d737f7d3d84e3ec8b411fe5620334adebd1636ca87b43f9a616c1486d5e4dfee342343294cd45ef66cfa89e93b32c39cd9ac9525f9a836f33b8b

  • SSDEEP

    12288:bpvVlkjpsks9ncJwYkw0LOLHjHd3KfWwNU17o126+X6R24Fd0I4VDfVu09IUpMJz:BEsn9+gS6uHk1U4FOIkNVIWMJd9c1m

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe
    "C:\Users\Admin\AppData\Local\Temp\a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe"
    1⤵
      PID:3648
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3648 -s 824
        2⤵
        • Program crash
        PID:4872
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3648 -ip 3648
      1⤵
        PID:400

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3648-1-0x0000000000970000-0x0000000000B32000-memory.dmp

        Filesize

        1.8MB

      • memory/3648-0-0x00000000751E0000-0x0000000075990000-memory.dmp

        Filesize

        7.7MB

      • memory/3648-2-0x00000000751E0000-0x0000000075990000-memory.dmp

        Filesize

        7.7MB