Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-04-2024 10:41

General

  • Target

    3c109429a3493bc05790599410d9814d.exe

  • Size

    347KB

  • MD5

    3c109429a3493bc05790599410d9814d

  • SHA1

    57b26558cc726c22ee9d7ffaa69cb2752c1b47a2

  • SHA256

    ba3c72316d10a01cd07680149cdcc960e607a4bbebadcefcc6eae803c258a5a3

  • SHA512

    4c8fdbf68acc89834991706cf27083796af6beb5b3023757c046894b6fe28c3d299786734a7774717e82c3a685939da5896ef3faf2898be08951e5308c6b938d

  • SSDEEP

    6144:qQnVK4NKrO3Eg2ASnfP10KVEI9iBmxf4AUkF10KobAMGuRcEEI7lpg2QFV:+4NKh1RnfP1bVH9iB+PUkF10BhGuRNED

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c109429a3493bc05790599410d9814d.exe
    "C:\Users\Admin\AppData\Local\Temp\3c109429a3493bc05790599410d9814d.exe"
    1⤵
      PID:4136
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4136 -s 696
        2⤵
        • Program crash
        PID:3372
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4136 -ip 4136
      1⤵
        PID:2092

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4136-2-0x0000000004760000-0x00000000047CD000-memory.dmp

        Filesize

        436KB

      • memory/4136-1-0x0000000002BB0000-0x0000000002CB0000-memory.dmp

        Filesize

        1024KB

      • memory/4136-3-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/4136-7-0x0000000002BB0000-0x0000000002CB0000-memory.dmp

        Filesize

        1024KB

      • memory/4136-8-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/4136-10-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/4136-12-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB