Analysis

  • max time kernel
    90s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240412-en
  • resource tags

    arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/04/2024, 15:31

General

  • Target

    addf8ec54b04eef9da41561b99f66261e7ea8bd53890c9f08dff41f423732e6f.exe

  • Size

    370KB

  • MD5

    66ac5e1ece270888dcc4989a714a2f29

  • SHA1

    f078329c903e3ed8add17127297e5d51a4639a92

  • SHA256

    addf8ec54b04eef9da41561b99f66261e7ea8bd53890c9f08dff41f423732e6f

  • SHA512

    2718c9f3b3eaa08845c9d14adebb1fa777fd0368bff3d1bb7bc27ee78e4a31118ed520dc0c1d3ff9fb6ee5146b33730bf15a8ea362437cfd32d6dc7a79f212d4

  • SSDEEP

    6144:4h02mdzmNDD6pUsEbkZwrfaQZqQr1v/3:qtCzmN3v51fIQhn3

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\addf8ec54b04eef9da41561b99f66261e7ea8bd53890c9f08dff41f423732e6f.exe
    "C:\Users\Admin\AppData\Local\Temp\addf8ec54b04eef9da41561b99f66261e7ea8bd53890c9f08dff41f423732e6f.exe"
    1⤵
      PID:4836
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 1252
        2⤵
        • Program crash
        PID:4316
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4836 -ip 4836
      1⤵
        PID:4852

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4836-1-0x0000000002CD0000-0x0000000002DD0000-memory.dmp

              Filesize

              1024KB

            • memory/4836-2-0x00000000031A0000-0x00000000031EB000-memory.dmp

              Filesize

              300KB

            • memory/4836-3-0x0000000000400000-0x0000000002C3F000-memory.dmp

              Filesize

              40.2MB

            • memory/4836-6-0x00000000031A0000-0x00000000031EB000-memory.dmp

              Filesize

              300KB