Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240412-en
  • resource tags

    arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20-04-2024 21:20

General

  • Target

    87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe

  • Size

    398KB

  • MD5

    43564bc9b7d3525a8b7b39bf99990146

  • SHA1

    0ae67b0b98a915f933bebb4d5c143fca7b1e39d0

  • SHA256

    87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f

  • SHA512

    5764e1338efc55d371fe81c65e236c0a96df3521702aae49471e483496133b2aac0135cc628c8bae1761f9e1107a1de26b1f6b1eefe0cecf497df5a4cbc94e21

  • SSDEEP

    6144:ZjDyU/DQxr5T8Zu5RWr0fGlSM/Ubp6UJT3Dv:9DyU2lTCuY0+wM/UnJTTv

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe
    "C:\Users\Admin\AppData\Local\Temp\87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe"
    1⤵
      PID:2200
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 1392
        2⤵
        • Program crash
        PID:2408
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 1424
        2⤵
        • Program crash
        PID:2244
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2200 -ip 2200
      1⤵
        PID:1648
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 2200 -ip 2200
        1⤵
          PID:3360

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2200-1-0x0000000001C60000-0x0000000001D60000-memory.dmp
          Filesize

          1024KB

        • memory/2200-2-0x0000000003880000-0x00000000038CE000-memory.dmp
          Filesize

          312KB

        • memory/2200-3-0x0000000000400000-0x0000000001A2E000-memory.dmp
          Filesize

          22.2MB

        • memory/2200-4-0x0000000000400000-0x0000000001A2E000-memory.dmp
          Filesize

          22.2MB

        • memory/2200-5-0x0000000003880000-0x00000000038CE000-memory.dmp
          Filesize

          312KB