Analysis

  • max time kernel
    132s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 22:38

General

  • Target

    db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe

  • Size

    10.0MB

  • MD5

    a02a5e4482514a29195a4a4a43a44980

  • SHA1

    622ec9962dec244327cf26da1f7d5af33aaa3744

  • SHA256

    db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f

  • SHA512

    dcaae9c2d194fd8d4b7a5d55273bf048a5d68cdf5b33444987b1a916af0aec5a92babf6341f0269d09d7c6aa91d8d73db19e24b5914f96d6e157c9d83cb6fa62

  • SSDEEP

    196608:x5IGEqaD1X3ANRAFLSayFnE5ck3rbgwlZJj7PRVUL/4lgCu44KUJNoIIu:LfESNRAzsnxk3rbgGZJjLRVimNu4472M

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe
    "C:\Users\Admin\AppData\Local\Temp\db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe"
    1⤵
      PID:3224
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3224 -s 224
        2⤵
        • Program crash
        PID:1020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3224 -ip 3224
      1⤵
        PID:1928

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3224-0-0x0000000000400000-0x000000000183A000-memory.dmp

        Filesize

        20.2MB

      • memory/3224-1-0x0000000000400000-0x000000000183A000-memory.dmp

        Filesize

        20.2MB