Analysis

  • max time kernel
    130s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 02:08

General

  • Target

    df8e6e6faecc0cfd09a7c4a6b8a9d705194eb6bf39a8c45f80fb69f6f448bf2b.exe

  • Size

    1.2MB

  • MD5

    b95bad6cdb330aaeed5dfc65ec116aae

  • SHA1

    63699b6efb32c36d0b62bebf261f5f23d727a808

  • SHA256

    df8e6e6faecc0cfd09a7c4a6b8a9d705194eb6bf39a8c45f80fb69f6f448bf2b

  • SHA512

    5d11905cf56e65f092f41aa52f06886549e90d5884f9305877ba4ecfbc2c61ff5028fd0d90c93f25c13319de1ab2c4d07232b00305d39cdfef29f0fd4abed6fc

  • SSDEEP

    12288:ustS45wZoNToVtMkQyin3c4hQniOEl1BYvLrt9Ty18TM:ustD5wZ4TQQyacmQbEHCv3t9Tyx

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df8e6e6faecc0cfd09a7c4a6b8a9d705194eb6bf39a8c45f80fb69f6f448bf2b.exe
    "C:\Users\Admin\AppData\Local\Temp\df8e6e6faecc0cfd09a7c4a6b8a9d705194eb6bf39a8c45f80fb69f6f448bf2b.exe"
    1⤵
      PID:4836
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 228
        2⤵
        • Program crash
        PID:4320
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 228
        2⤵
        • Program crash
        PID:3672
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4836 -ip 4836
      1⤵
        PID:1904
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4836 -ip 4836
        1⤵
          PID:856

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads