Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/06/2024, 06:13

General

  • Target

    demos/after/hello/out/production/hello/go-bins/helloworld.exe

  • Size

    946KB

  • MD5

    e5203351b5965943fab9c5f84358ed80

  • SHA1

    e94266b922afd8d993730e2e2bd4648ca283aff2

  • SHA256

    8fbb890da716b93613e273dc4f2088ca3086c4b1c770dd8d13153c210e1e7798

  • SHA512

    c8a84c6416af31c71bafa5e4f83a72885f11d4d588d8c1f46781bfd86b263d2cedd11893c565555cfb47e71ed094081737d1aa5d9fbe60cda5bcff075c1fa704

  • SSDEEP

    24576:Y3ZZlFS0LRGVKfnlMCe8HcVGXtRhK355ffnHuGUSkC3oyi5muzOb2Doqw8:IS0LwVkgOGUSkC3oyi5m5

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe
    "C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"
    1⤵
      PID:936
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 416
        2⤵
        • Program crash
        PID:4768
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 936 -s 424
        2⤵
        • Program crash
        PID:1920
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 936 -ip 936
      1⤵
        PID:4784
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 936 -ip 936
        1⤵
          PID:4780

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads