Analysis

  • max time kernel
    90s
  • max time network
    93s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    08/06/2024, 22:01

General

  • Target

    77367fc7553b394eaed89318cb30d58c01e392ec08dff08603c4f618d3016cd2.exe

  • Size

    379KB

  • MD5

    b218bb9cc2edc37aab1cb6c989d4a9f9

  • SHA1

    1a138aa01a22031e89f12c08e008a09c9e8fe57c

  • SHA256

    77367fc7553b394eaed89318cb30d58c01e392ec08dff08603c4f618d3016cd2

  • SHA512

    f56b2b74177c81685d1999ecc451e0069d996c7c64ee1ab48d60fa2ca500fff977c8db779a17351e4ba69256392e933741cdf508f66389cce9d6445f0c12da39

  • SSDEEP

    6144:gfdLtsIq4HI0nK0L/qINQSb0CWfKBQd16lSZGt22:kh9qJ0yINBbWfMU6lS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\77367fc7553b394eaed89318cb30d58c01e392ec08dff08603c4f618d3016cd2.exe
    "C:\Users\Admin\AppData\Local\Temp\77367fc7553b394eaed89318cb30d58c01e392ec08dff08603c4f618d3016cd2.exe"
    1⤵
      PID:1468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1468 -s 1260
        2⤵
        • Program crash
        PID:4484
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1468 -ip 1468
      1⤵
        PID:856

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1468-3-0x0000000000400000-0x000000000045B000-memory.dmp

              Filesize

              364KB

            • memory/1468-2-0x0000000003910000-0x0000000003960000-memory.dmp

              Filesize

              320KB

            • memory/1468-1-0x0000000001E70000-0x0000000001F70000-memory.dmp

              Filesize

              1024KB

            • memory/1468-5-0x0000000000400000-0x000000000045B000-memory.dmp

              Filesize

              364KB

            • memory/1468-4-0x0000000000400000-0x0000000001BDA000-memory.dmp

              Filesize

              23.9MB