Analysis

  • max time kernel
    93s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/04/2024, 09:28

General

  • Target

    da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe

  • Size

    345KB

  • MD5

    9956354fe3a5fcba6a208bf28e164317

  • SHA1

    bfeb0132dae76f57f0a1c255b02a8f56eab3ef13

  • SHA256

    da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c

  • SHA512

    88f285aa580b73faf7b9db4e119ac2b67f139ad08c5421eab6404c6560b29411e5495b5428d9c6f54cddad4940c69829efc2faa4398fd893b08e2fc28356d2e0

  • SSDEEP

    768:jHp73JTio6M8etrfk7p4jjy79Fl+phaokUhILisKl4q7:Dtltbk2jj2FlzoGisKld7

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe
    "C:\Users\Admin\AppData\Local\Temp\da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe"
    1⤵
      PID:1932
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 208
        2⤵
        • Program crash
        PID:2936
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 228
        2⤵
        • Program crash
        PID:652
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1932 -ip 1932
      1⤵
        PID:3148
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 1932 -ip 1932
        1⤵
          PID:1420

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/1932-0-0x0000000000220000-0x000000000027F000-memory.dmp

                Filesize

                380KB

              • memory/1932-1-0x0000000000220000-0x000000000027F000-memory.dmp

                Filesize

                380KB