Analysis

  • max time kernel
    67s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-04-2024 02:20

General

  • Target

    df9bf21bdbcd5a27ad3a7d230070135ab62ae4bb4ca18efefaa58d065242bd4d.exe

  • Size

    455KB

  • MD5

    4fe50d7ebbbbc20cd513cc300952a3c8

  • SHA1

    87d218b2066ca1511e2c6659eb2bb29f5b5255e3

  • SHA256

    df9bf21bdbcd5a27ad3a7d230070135ab62ae4bb4ca18efefaa58d065242bd4d

  • SHA512

    78ca6e4c350b182e7c4206b5b15f72110acebc16463dc4b6a36e7271f147936fad9bc990513a11ebaf752a925b8d650e2aa389cfb5909da1cae200aff1efdb03

  • SSDEEP

    6144:wPKlSI6wvdEjpq79xyN+PKbaKNt8RUeW2s4A9YoxYrP9nys3ODE:wylSI66yj4nOaaJh9x6tT3wE

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df9bf21bdbcd5a27ad3a7d230070135ab62ae4bb4ca18efefaa58d065242bd4d.exe
    "C:\Users\Admin\AppData\Local\Temp\df9bf21bdbcd5a27ad3a7d230070135ab62ae4bb4ca18efefaa58d065242bd4d.exe"
    1⤵
      PID:816
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 816 -s 720
        2⤵
        • Program crash
        PID:3628
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 816 -ip 816
      1⤵
        PID:1648

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/816-1-0x0000000001D60000-0x0000000001E60000-memory.dmp
        Filesize

        1024KB

      • memory/816-2-0x0000000001CD0000-0x0000000001D3D000-memory.dmp
        Filesize

        436KB

      • memory/816-3-0x0000000000400000-0x0000000001A3D000-memory.dmp
        Filesize

        22.2MB

      • memory/816-5-0x0000000001D60000-0x0000000001E60000-memory.dmp
        Filesize

        1024KB

      • memory/816-6-0x0000000000400000-0x0000000001A3D000-memory.dmp
        Filesize

        22.2MB

      • memory/816-9-0x0000000000400000-0x0000000001A3D000-memory.dmp
        Filesize

        22.2MB