Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240611-en
  • resource tags

    arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14/06/2024, 22:54

General

  • Target

    58e65cfde536ec41977603948a4fe9d44e046fd6c0f917b95cc38a0d56254ed6.exe

  • Size

    414KB

  • MD5

    c559a291d3ea6f2165b35dff4c85bbb0

  • SHA1

    db1c6805f32a613c3e1f95d72103221a2bc86b34

  • SHA256

    58e65cfde536ec41977603948a4fe9d44e046fd6c0f917b95cc38a0d56254ed6

  • SHA512

    2cb8ec8d2c8f448cdef72c775e7c726c1c60e937541a2d8e8b46c7c1c00bfb8f460607cd8d5cb16cf5f91ca2a21720b911c3aeee0848439d4a33ab4e873b231c

  • SSDEEP

    6144:RFb1Wyino2otCHKYdtqcyoUjezRbiy7XZsObuWfS7FyCGmkuSvTx:RiymeCHKQeorz1Kv/7FivRx

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58e65cfde536ec41977603948a4fe9d44e046fd6c0f917b95cc38a0d56254ed6.exe
    "C:\Users\Admin\AppData\Local\Temp\58e65cfde536ec41977603948a4fe9d44e046fd6c0f917b95cc38a0d56254ed6.exe"
    1⤵
      PID:3812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3812 -s 404
        2⤵
        • Program crash
        PID:804
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3812 -ip 3812
      1⤵
        PID:4832

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3812-1-0x0000000000850000-0x0000000000950000-memory.dmp

        Filesize

        1024KB

      • memory/3812-3-0x0000000000400000-0x000000000045B000-memory.dmp

        Filesize

        364KB

      • memory/3812-2-0x0000000000800000-0x0000000000850000-memory.dmp

        Filesize

        320KB

      • memory/3812-4-0x0000000000400000-0x0000000000478000-memory.dmp

        Filesize

        480KB

      • memory/3812-5-0x0000000000400000-0x000000000045B000-memory.dmp

        Filesize

        364KB