Analysis

  • max time kernel
    137s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 02:02

General

  • Target

    b20e669188ba18c684d39899ea5fd5a2c02ceb10af387c954e1676601cc34ed0.exe

  • Size

    76KB

  • MD5

    0223fddbb6fd234549511b34c122d0b3

  • SHA1

    1a564516495787c89b934332a3b7b17b90113ebc

  • SHA256

    b20e669188ba18c684d39899ea5fd5a2c02ceb10af387c954e1676601cc34ed0

  • SHA512

    967e45adf21a9f565459ad3b155ffe6e3e7441ff9f14419eefc051d550aeed06132e19da60948376ae15c2e4cfbe4c304a994dc42c8bab3dc6e29e11c7a1bfd5

  • SSDEEP

    1536:ZEfL1bgOy8+I4O5+n6J44K5XTIoJgKa0qMax213IFjgyKH/:0L1EOnixXaKa0qMW213IFEyK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b20e669188ba18c684d39899ea5fd5a2c02ceb10af387c954e1676601cc34ed0.exe
    "C:\Users\Admin\AppData\Local\Temp\b20e669188ba18c684d39899ea5fd5a2c02ceb10af387c954e1676601cc34ed0.exe"
    1⤵
      PID:2060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 216
        2⤵
        • Program crash
        PID:1448
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2060 -ip 2060
      1⤵
        PID:1088

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2060-0-0x0000000001F80000-0x0000000001FA5000-memory.dmp

        Filesize

        148KB