Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-04-2024 16:40

General

  • Target

    89966e222393a55e2b63b2689fa38f67619899ec18da1eef0f9c99e5046ea0f4.exe

  • Size

    450KB

  • MD5

    001350967c6ca5f3045c141aaabc8358

  • SHA1

    5d05c80a48a26f19b0b41ee8bab9bbe8bf69c319

  • SHA256

    89966e222393a55e2b63b2689fa38f67619899ec18da1eef0f9c99e5046ea0f4

  • SHA512

    1b0e580ec0bb7600e7e44a9875606000a20c4c875b0bc71ab17a44c1c24f0bd3f809a9c44405cb0d9c47f5ceb8437894e42f80ffe5764c016941732f59a910c1

  • SSDEEP

    6144:vMYqjdjl6OJs7+i5OlzuaWhJdWyqHMspXoZso3NlYTJQQJGfXyncBu:vnqjRcOJA1wupJ0xoZso33Y1QQAXycBu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\89966e222393a55e2b63b2689fa38f67619899ec18da1eef0f9c99e5046ea0f4.exe
    "C:\Users\Admin\AppData\Local\Temp\89966e222393a55e2b63b2689fa38f67619899ec18da1eef0f9c99e5046ea0f4.exe"
    1⤵
      PID:2864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 696
        2⤵
        • Program crash
        PID:1044
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2864 -ip 2864
      1⤵
        PID:3904

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2864-1-0x0000000004260000-0x0000000004360000-memory.dmp

        Filesize

        1024KB

      • memory/2864-2-0x0000000005D00000-0x0000000005D6D000-memory.dmp

        Filesize

        436KB

      • memory/2864-3-0x0000000000400000-0x0000000004060000-memory.dmp

        Filesize

        60.4MB

      • memory/2864-5-0x0000000004260000-0x0000000004360000-memory.dmp

        Filesize

        1024KB

      • memory/2864-7-0x0000000005D00000-0x0000000005D6D000-memory.dmp

        Filesize

        436KB

      • memory/2864-6-0x0000000000400000-0x0000000004060000-memory.dmp

        Filesize

        60.4MB

      • memory/2864-10-0x0000000000400000-0x0000000004060000-memory.dmp

        Filesize

        60.4MB

      • memory/2864-12-0x0000000000400000-0x0000000004060000-memory.dmp

        Filesize

        60.4MB