Overview
overview
3Static
static
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
1demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
1materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3demos/afte...rld.js
windows7-x64
3demos/afte...rld.js
windows10-2004-x64
3demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1demos/afte...ld.exe
windows7-x64
1demos/afte...ld.exe
windows10-2004-x64
3demos/afte...rld.js
windows7-x64
3demos/afte...rld.js
windows10-2004-x64
3demos/befo...ld.exe
windows7-x64
1demos/befo...ld.exe
windows10-2004-x64
3demos/befo...rld.js
windows7-x64
3demos/befo...rld.js
windows10-2004-x64
3materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1materials/...es.pdf
windows7-x64
1materials/...es.pdf
windows10-2004-x64
1Analysis
-
max time kernel
128s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
15-06-2024 06:13
Behavioral task
behavioral1
Sample
materials/1-go-m1-overview-slides.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
materials/1-go-m1-overview-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
materials/10-go-m10-concurrency-slides.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
materials/10-go-m10-concurrency-slides.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
materials/2-go-m2-development-slides.pdf
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
materials/2-go-m2-development-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
demos/after/hello/src/helloworld.js
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
demos/after/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
materials/3-go-m3-variables-slides.pdf
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
materials/3-go-m3-variables-slides.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
demos/after/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
demos/after/hello/src/helloworld.js
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
demos/after/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
demos/before/hello/out/production/hello/go-bins/helloworld.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
demos/before/hello/src/helloworld.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
demos/before/hello/src/helloworld.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
materials/4-go-m4-functions-slides.pdf
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
materials/4-go-m4-functions-slides.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
materials/5-go-m5-branching-slides.pdf
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
materials/5-go-m5-branching-slides.pdf
Resource
win10v2004-20240611-en
General
-
Target
demos/after/hello/out/production/hello/go-bins/helloworld.exe
-
Size
954KB
-
MD5
35ef7c376e8307a963cb85c717706d55
-
SHA1
7fcb1543ef949b455319feec98f2f47f30f64315
-
SHA256
90912f489e795c294b64d16e81e77c6233c16ea43bda711de4cbe145adc88f46
-
SHA512
ea4b5f4a2e14270f52e0aa3ed5fe5dcaa28d9983806faba5c68af2f71d06a5d369428647dcf205faf1c31f01a9757f84a2bd5991c5f83f64e4046b750c77fda3
-
SSDEEP
24576:bN++kGX6+9NjA1KQ7U07yegGqZxHEF18F/UL4ihHjG6R0i71Fcm8iKcuZULC:bHX6mNQ8ULThHjG6R0iQO
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2944 3056 WerFault.exe 88 1552 3056 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"C:\Users\Admin\AppData\Local\Temp\demos\after\hello\out\production\hello\go-bins\helloworld.exe"1⤵PID:3056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 4162⤵
- Program crash
PID:2944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 4602⤵
- Program crash
PID:1552
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3056 -ip 30561⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 3056 -ip 30561⤵PID:4556
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4308,i,3671441404766730751,12082497324212183132,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:81⤵PID:1784