Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-06-2024 02:20

General

  • Target

    d8c55cf4e566afe549a461e2b9e631afb81780c7be6c73dbaa1e2f47cd773833.exe

  • Size

    436KB

  • MD5

    c831c9942a1098a8e2f1eadfc7f78f42

  • SHA1

    0611d48856a6e05a708af71a77b003bc7e7d48e1

  • SHA256

    d8c55cf4e566afe549a461e2b9e631afb81780c7be6c73dbaa1e2f47cd773833

  • SHA512

    4fdc33f8758f6a7aae9d60ef69191ded023f96e5fbd78e0209665e1acfd6ff1e74138feec066d82034df0cb3dac211adfa56480db208b882be5f7acf11661964

  • SSDEEP

    12288:TR4FBWTgAuxC/So136UAOpxkjL20g28QP47s:TRKcSC/V1m8s47s

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d8c55cf4e566afe549a461e2b9e631afb81780c7be6c73dbaa1e2f47cd773833.exe
    "C:\Users\Admin\AppData\Local\Temp\d8c55cf4e566afe549a461e2b9e631afb81780c7be6c73dbaa1e2f47cd773833.exe"
    1⤵
      PID:4304
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 636
        2⤵
        • Program crash
        PID:3792
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4304 -ip 4304
      1⤵
        PID:1892

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4304-3-0x0000000000400000-0x000000000046E000-memory.dmp

        Filesize

        440KB

      • memory/4304-2-0x0000000004970000-0x00000000049DC000-memory.dmp

        Filesize

        432KB

      • memory/4304-1-0x0000000002ED0000-0x0000000002FD0000-memory.dmp

        Filesize

        1024KB

      • memory/4304-4-0x0000000000400000-0x0000000002D4B000-memory.dmp

        Filesize

        41.3MB

      • memory/4304-7-0x0000000004970000-0x00000000049DC000-memory.dmp

        Filesize

        432KB

      • memory/4304-6-0x0000000002ED0000-0x0000000002FD0000-memory.dmp

        Filesize

        1024KB

      • memory/4304-8-0x0000000000400000-0x000000000046E000-memory.dmp

        Filesize

        440KB

      • memory/4304-9-0x0000000000400000-0x0000000002D4B000-memory.dmp

        Filesize

        41.3MB

      • memory/4304-12-0x0000000000400000-0x000000000046E000-memory.dmp

        Filesize

        440KB

      • memory/4304-11-0x0000000000400000-0x0000000002D4B000-memory.dmp

        Filesize

        41.3MB