Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 07:43

General

  • Target

    2228-11-0x0000000000400000-0x00000000004A2000-memory.exe

  • Size

    648KB

  • MD5

    5697dda075f1a05a7d113565c5bee667

  • SHA1

    da242361db411b821ec533809673bb95db4dddfd

  • SHA256

    260b83b3f5db03058597c74c351f5387a53a13b9fd65af07cec80e445878ebb0

  • SHA512

    2eb5312f9b2ed60e019cd871101c4f3fbecb8a3779c51a9ee761b6144cfa262d2615502f8a2009f8e7d14a4c2120932388ef7a09887f688b761aab35f9ae5bdd

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:nSHIG6mQwGmfOQd8YhY0/EWUG

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2228-11-0x0000000000400000-0x00000000004A2000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2228-11-0x0000000000400000-0x00000000004A2000-memory.exe"
    1⤵
      PID:2812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2812 -s 216
        2⤵
        • Program crash
        PID:2416
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2812 -ip 2812
      1⤵
        PID:456

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads