Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240412-en
  • resource tags

    arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    23-04-2024 17:50

General

  • Target

    09c5aa33c57b73e516b2c7b8fe99fe2a94ba99b6285c2236870f2abd177fd764.exe

  • Size

    408KB

  • MD5

    ad2a17729949e4098f8eddb7b0552851

  • SHA1

    8781271ca9557b601315138e0d66af1912187b6e

  • SHA256

    09c5aa33c57b73e516b2c7b8fe99fe2a94ba99b6285c2236870f2abd177fd764

  • SHA512

    eb81120218332c5df8ff41591b165ea2ebcabab6d1c9051e6c2353cfbe5e6a1e6379f53569858bda3599ba922fddcb1336750f3f66f2d8c05674f2328957c845

  • SSDEEP

    6144:moLjt/eo/zRE6cMxkcvI1kt8H+244+sEac:moLjpeahzkcAkt8uZ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\09c5aa33c57b73e516b2c7b8fe99fe2a94ba99b6285c2236870f2abd177fd764.exe
    "C:\Users\Admin\AppData\Local\Temp\09c5aa33c57b73e516b2c7b8fe99fe2a94ba99b6285c2236870f2abd177fd764.exe"
    1⤵
      PID:1740
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1740 -s 1252
        2⤵
        • Program crash
        PID:4980
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1740 -ip 1740
      1⤵
        PID:4832

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1740-1-0x0000000004130000-0x0000000004230000-memory.dmp

        Filesize

        1024KB

      • memory/1740-2-0x0000000004700000-0x000000000474B000-memory.dmp

        Filesize

        300KB

      • memory/1740-3-0x0000000000400000-0x000000000405A000-memory.dmp

        Filesize

        60.4MB

      • memory/1740-4-0x0000000004700000-0x000000000474B000-memory.dmp

        Filesize

        300KB