Analysis

  • max time kernel
    139s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 01:27

General

  • Target

    SecuriteInfo.com.Win32.Evo-gen.11957.2669.exe

  • Size

    1.2MB

  • MD5

    b95bad6cdb330aaeed5dfc65ec116aae

  • SHA1

    63699b6efb32c36d0b62bebf261f5f23d727a808

  • SHA256

    df8e6e6faecc0cfd09a7c4a6b8a9d705194eb6bf39a8c45f80fb69f6f448bf2b

  • SHA512

    5d11905cf56e65f092f41aa52f06886549e90d5884f9305877ba4ecfbc2c61ff5028fd0d90c93f25c13319de1ab2c4d07232b00305d39cdfef29f0fd4abed6fc

  • SSDEEP

    12288:ustS45wZoNToVtMkQyin3c4hQniOEl1BYvLrt9Ty18TM:ustD5wZ4TQQyacmQbEHCv3t9Tyx

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Evo-gen.11957.2669.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Evo-gen.11957.2669.exe"
    1⤵
      PID:3080
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3080 -s 224
        2⤵
        • Program crash
        PID:1660
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3080 -s 224
        2⤵
        • Program crash
        PID:1568
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3080 -ip 3080
      1⤵
        PID:2360
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3080 -ip 3080
        1⤵
          PID:4772
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3976,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:8
          1⤵
            PID:1140

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads