Analysis

  • max time kernel
    134s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-05-2024 07:19

General

  • Target

    fa425f2ca9792db53f2304128aa7a8b05fa1f8811c059e69c3eb08ea7808ec3b.exe

  • Size

    393KB

  • MD5

    95ce99000c3a322af715990e8834f05e

  • SHA1

    3f3404787bc6ccbb562c5bed2fc93d04faed2174

  • SHA256

    fa425f2ca9792db53f2304128aa7a8b05fa1f8811c059e69c3eb08ea7808ec3b

  • SHA512

    b425fb79eb1011d5fdd98f4373f7ff1cd5905b4218d66df6b343a5334f48b8d3eaf32d398b9826cb1ab6b1afc104b0498be4351aa8c1911ad13dab709880b146

  • SSDEEP

    6144:+VaIrNO6oBcW5QW/nRx7+mA1cHEDy8Chy1DGOQ9mYoZwFLIDXPbrXckXcx3:6r+qRW/KmWcHQZGOmmYoeFLWbrc1

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fa425f2ca9792db53f2304128aa7a8b05fa1f8811c059e69c3eb08ea7808ec3b.exe
    "C:\Users\Admin\AppData\Local\Temp\fa425f2ca9792db53f2304128aa7a8b05fa1f8811c059e69c3eb08ea7808ec3b.exe"
    1⤵
      PID:4284
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 444
        2⤵
        • Program crash
        PID:4684
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4284 -ip 4284
      1⤵
        PID:3052

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4284-0-0x0000000000400000-0x000000000044E000-memory.dmp

        Filesize

        312KB

      • memory/4284-1-0x0000000000400000-0x000000000044E000-memory.dmp

        Filesize

        312KB

      • memory/4284-2-0x0000000000400000-0x000000000044E000-memory.dmp

        Filesize

        312KB

      • memory/4284-6-0x0000000000400000-0x000000000044E000-memory.dmp

        Filesize

        312KB

      • memory/4284-5-0x0000000000401000-0x0000000000427000-memory.dmp

        Filesize

        152KB

      • memory/4284-4-0x0000000000730000-0x000000000076C000-memory.dmp

        Filesize

        240KB

      • memory/4284-3-0x0000000000600000-0x0000000000601000-memory.dmp

        Filesize

        4KB