Overview

overview

6

Static

static

1

6e31e0edf1...27.exe

windows7-x64

6

6e31e0edf1...27.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    125s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 07:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6e31e0edf12684b89f4e60fe45a35d7cc0af17e9419b147ca3998fccbe1b9d27.exe

  • Size

    444KB

  • MD5

    6110377a5fd68a0c0dc696bd38ffbfb2

  • SHA1

    c0cfe3719308375d37c50fc3748f8f0c6b5b6161

  • SHA256

    6e31e0edf12684b89f4e60fe45a35d7cc0af17e9419b147ca3998fccbe1b9d27

  • SHA512

    92989cd90083cfc8148fe680a26c071a05975ee0609db8f08b6b0660c49b603c62b3423f9e850deea1ae8b52b0c43106c1e915dd2828cd83c39b916d479eddff

  • SSDEEP

    12288:kzC1F/meN7YOxHf9JhqeKnq/sqn6pXTsKjt2V9J:4C1FmK7YOlfwhnKs+6pXTnp2V9

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6e31e0edf12684b89f4e60fe45a35d7cc0af17e9419b147ca3998fccbe1b9d27.exe
    "C:\Users\Admin\AppData\Local\Temp\6e31e0edf12684b89f4e60fe45a35d7cc0af17e9419b147ca3998fccbe1b9d27.exe"
    1⤵
      PID:3144
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 604
        2⤵
        • Program crash
        PID:2392
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 612
        2⤵
        • Program crash
        PID:3608
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3144 -ip 3144
      1⤵
        PID:868
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4476,i,540641839538766847,13082202367948907577,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:8
        1⤵
          PID:4032
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 3144 -ip 3144
          1⤵
            PID:620

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3144-0-0x0000000000AF0000-0x0000000000B64000-memory.dmp

            Filesize

            464KB

            Download

          • memory/3144-1-0x0000000000AF0000-0x0000000000B64000-memory.dmp

            Filesize

            464KB

            Download