Analysis

  • max time kernel
    71s
  • max time network
    65s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-04-2024 13:16

General

  • Target

    7a73a594c084542382bfdd764ca6b08941232397f35437b74782ae5b1fb42659.exe

  • Size

    348KB

  • MD5

    12b99c7364914b58406fc6d3b6a4cf99

  • SHA1

    f331dfb6496c09a7db09649267cd0e53f3a1fd6e

  • SHA256

    7a73a594c084542382bfdd764ca6b08941232397f35437b74782ae5b1fb42659

  • SHA512

    b6d0bf56725b372f1ee1f1298b99121291ed11093057af4a1a8ec4b2fb8f89382201f285ef7469f856c7ec79d9db126401911dc4a955bdcd2eaee78d39d4dae1

  • SSDEEP

    6144:rduS03pdQbVg12jXuaGWkJ0Oey7lZr1asn3e5mV/9+D9f/a4ENTUh8d5a1o:ZoXQHy3WkH8sn3e5maa4MYo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7a73a594c084542382bfdd764ca6b08941232397f35437b74782ae5b1fb42659.exe
    "C:\Users\Admin\AppData\Local\Temp\7a73a594c084542382bfdd764ca6b08941232397f35437b74782ae5b1fb42659.exe"
    1⤵
      PID:468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 468 -s 724
        2⤵
        • Program crash
        PID:3068
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 468 -ip 468
      1⤵
        PID:4876

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/468-1-0x0000000002CA0000-0x0000000002DA0000-memory.dmp

        Filesize

        1024KB

      • memory/468-2-0x0000000002BF0000-0x0000000002C5D000-memory.dmp

        Filesize

        436KB

      • memory/468-3-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/468-6-0x0000000002CA0000-0x0000000002DA0000-memory.dmp

        Filesize

        1024KB

      • memory/468-7-0x0000000002BF0000-0x0000000002C5D000-memory.dmp

        Filesize

        436KB

      • memory/468-8-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/468-10-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB

      • memory/468-12-0x0000000000400000-0x0000000002B15000-memory.dmp

        Filesize

        39.1MB