Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-05-2024 22:43

General

  • Target

    54ca8a3c0cbbba20baf645fe8da20352dc441197638ceb2cf1e951db40e8713c.exe

  • Size

    664KB

  • MD5

    896326a2ac5e70509910b5e788802808

  • SHA1

    96415699544ec5a5559153a07b8ea832042ce5a9

  • SHA256

    54ca8a3c0cbbba20baf645fe8da20352dc441197638ceb2cf1e951db40e8713c

  • SHA512

    cbe3e8a4ac9b29568cb352180925dc1952760d7deabdfe853cb7240607e2e4f88de1e58b2daa1471fbf0c16a8a399984e5108cc807e059dd9f99bd9bbedae574

  • SSDEEP

    12288:VAjtXdDpfOIiWES2JZIsJ4Dgi/9xTEKSu4IkV4NIpW:oXnW8ES2fuxTEKSXIkV46o

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54ca8a3c0cbbba20baf645fe8da20352dc441197638ceb2cf1e951db40e8713c.exe
    "C:\Users\Admin\AppData\Local\Temp\54ca8a3c0cbbba20baf645fe8da20352dc441197638ceb2cf1e951db40e8713c.exe"
    1⤵
      PID:5108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 1172
        2⤵
        • Program crash
        PID:4092
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5108 -ip 5108
      1⤵
        PID:5080

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5108-0-0x000000007454E000-0x000000007454F000-memory.dmp

        Filesize

        4KB

      • memory/5108-1-0x0000000000B60000-0x0000000000C0C000-memory.dmp

        Filesize

        688KB

      • memory/5108-2-0x0000000005B70000-0x0000000006114000-memory.dmp

        Filesize

        5.6MB

      • memory/5108-3-0x0000000005660000-0x00000000056FC000-memory.dmp

        Filesize

        624KB

      • memory/5108-4-0x0000000005700000-0x0000000005792000-memory.dmp

        Filesize

        584KB

      • memory/5108-5-0x0000000005600000-0x000000000560A000-memory.dmp

        Filesize

        40KB

      • memory/5108-6-0x0000000005800000-0x0000000005856000-memory.dmp

        Filesize

        344KB

      • memory/5108-7-0x0000000074540000-0x0000000074CF0000-memory.dmp

        Filesize

        7.7MB

      • memory/5108-8-0x0000000074540000-0x0000000074CF0000-memory.dmp

        Filesize

        7.7MB