Analysis

  • max time kernel
    135s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 22:39

General

  • Target

    66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe

  • Size

    119KB

  • MD5

    3aa1d3c73ece7aeed5d588ce05ce0562

  • SHA1

    8cd0baba9c02bbe6e5dba170c2d0d2c848aac1cd

  • SHA256

    66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67

  • SHA512

    dbb70281bb048877d68135c95f85d0c64edc3f69f7f330931b269d79a68bc4d72d93561d12962d770e848622b3658e113c35d4a11ca74e3caf8b352caa766ec6

  • SSDEEP

    768:l3y/I/x1jLm1FkNXL11QndeB+/SD1c7cniYs2sgALvv:pKY1andeB+S5tnCvv

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe
    "C:\Users\Admin\AppData\Local\Temp\66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe"
    1⤵
      PID:1668
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 216
        2⤵
        • Program crash
        PID:2904
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1668 -ip 1668
      1⤵
        PID:5084

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1668-0-0x0000000002650000-0x0000000002685000-memory.dmp

        Filesize

        212KB