Analysis

  • max time kernel
    51s
  • max time network
    56s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-06-2024 18:11

General

  • Target

    KRNLWRD/krnl.exe

  • Size

    1.2MB

  • MD5

    fb3a52d1045b1a0298668f2d77680306

  • SHA1

    e16d5085977f1b895b7b2a046570b2da474add86

  • SHA256

    8869c44219364f911548cb18da0cc6413b3277d3a8a8df18d0a521b558830d6e

  • SHA512

    e19ce4c86ef8bf2ab25b4da67bf83acef5a8e688abfd3f96e8dec8169ce410c833df7685b6fb0b7489cf90ca51c56cd7264e8b2a94865aea5e5dacd4c5b7f44f

  • SSDEEP

    12288:LMqP5hP0pwI7+G70EE/0GGGGGGhGGGGxdoM43nwVkokbtkK:LZEpRC4ysGGGGGGhGGGGx1Vpstz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe
    "C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe"
    1⤵
      PID:4904
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3804,i,15140928051103392835,1612840580898364401,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
      1⤵
        PID:1996

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4904-0-0x000000007470E000-0x000000007470F000-memory.dmp

        Filesize

        4KB

      • memory/4904-1-0x0000000000FC0000-0x00000000010F6000-memory.dmp

        Filesize

        1.2MB

      • memory/4904-2-0x0000000005FB0000-0x0000000006554000-memory.dmp

        Filesize

        5.6MB

      • memory/4904-3-0x0000000005B00000-0x0000000005B92000-memory.dmp

        Filesize

        584KB

      • memory/4904-5-0x0000000074700000-0x0000000074EB0000-memory.dmp

        Filesize

        7.7MB

      • memory/4904-6-0x0000000074700000-0x0000000074EB0000-memory.dmp

        Filesize

        7.7MB