Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 01:49

General

  • Target

    9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe

  • Size

    796KB

  • MD5

    aad2945372e5ee110228db3817694d53

  • SHA1

    dfda726a65e25151593be2c33b0657a17ba6e6ce

  • SHA256

    9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b

  • SHA512

    ce53b938c921f374a9d8889ec23a511e3d1211db1b538b4c4ec874c38bedef58bf8bc09c7a980869292bbaa1ff77bd53f16db27a1e6f0800366eae148244a1ee

  • SSDEEP

    12288:mVn0bgMfMkLPrDosqkPtu0ejxYgbdkq6d6z/fKCvePVGDewKMaCu+o7KiY9L8j:i0bZvDosqkFuXj3qLdC8uBBa0WK39L8j

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe
    "C:\Users\Admin\AppData\Local\Temp\9b6b28c814612529573c66ef2a8602a4788d8b11dc92efb06423db02ddfcb48b.exe"
    1⤵
      PID:4024
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4024 -s 364
        2⤵
        • Program crash
        PID:7132
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4024 -ip 4024
      1⤵
        PID:7064

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4024-0-0x0000000000400000-0x00000000004CC000-memory.dmp

        Filesize

        816KB

      • memory/4024-1-0x00000000760C0000-0x00000000762D5000-memory.dmp

        Filesize

        2.1MB

      • memory/4024-3275-0x0000000000400000-0x00000000004CC000-memory.dmp

        Filesize

        816KB