Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2024 06:13

General

  • Target

    demos/after/hello/out/production/hello/go-bins/helloworld.exe

  • Size

    946KB

  • MD5

    92eba3fdae6886bbeec445a0bf301029

  • SHA1

    20c44623c112d8dd0eb9b992e9a0d947ef31a23f

  • SHA256

    eca0f8d17778fdf37e29c04c1f1602c1dd4f2376c24c692f3788ee4cb1231428

  • SHA512

    2c99a1a95f0bd1b27f8349834be1ddc37947c3856994b1c340bce5de00efbd7e86b7af4a4c4851864ad4eb4821903c9a361197e56d514350eacb709d824786fe

  • SSDEEP

    24576:Hx6sk0Gf3OmPceBuCSW18qGIUNTvSJZF27gymWcco0QC0ofR1sW+lKa2gDa:g0GvVagymWcco0QC0v

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe
    "C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"
    1⤵
      PID:2352
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 416
        2⤵
        • Program crash
        PID:4444
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 436
        2⤵
        • Program crash
        PID:2736
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2352 -ip 2352
      1⤵
        PID:4364
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2352 -ip 2352
        1⤵
          PID:4132

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads