Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-07-2024 08:04

General

  • Target

    PCPS.exe

  • Size

    2.8MB

  • MD5

    483da837d70e72105520ea82033c49ff

  • SHA1

    4339212b959c1ead23bb5cc31dcf12736ee3e1d4

  • SHA256

    d9f553bfe5254e734f2c687a69d9a61f082b87c74fc03af1a51dff715a6d7e9d

  • SHA512

    1501cef6c13fd7285749b27ff1f1cb7bcbd4e75543eb3b3d78da649c3603028731b361a24d724d68dc41737e550ac826baf829806a69d7a90366e1768a58d23f

  • SSDEEP

    49152:B3+xTCM1oVeG0kGj/esU462SJJm0tjRU+hT9Lgr84zMG8qK7kyjF3U4RRGef++fd:BLGefGh

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PCPS.exe
    "C:\Users\Admin\AppData\Local\Temp\PCPS.exe"
    1⤵
    • Loads dropped DLL
    PID:3784
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3784 -s 1108
      2⤵
      • Program crash
      PID:4252
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3784 -ip 3784
    1⤵
      PID:1836

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\PcapDotNet.Core.dll

      Filesize

      69KB

      MD5

      45fa4315c7631b828e2871db89b3df27

      SHA1

      f34f3a5344abbb67a21348be9eaeba7831c7333e

      SHA256

      e580ca9c0382a8663d6bdff6e53802bd73fa8a71689d7f38521ca02269775a58

      SHA512

      1dd74a83b0435674d61e0e752e3d671334970fd7d235203faf1791c67965eee2324a7dd18e03be575138d3c3639d106534a084c3f9a78d37ff4ff77ead4cfd96

    • memory/3784-0-0x000000007492E000-0x000000007492F000-memory.dmp

      Filesize

      4KB

    • memory/3784-1-0x0000000000800000-0x0000000000AE0000-memory.dmp

      Filesize

      2.9MB

    • memory/3784-2-0x0000000005B00000-0x00000000060A4000-memory.dmp

      Filesize

      5.6MB

    • memory/3784-3-0x0000000005550000-0x00000000055E2000-memory.dmp

      Filesize

      584KB

    • memory/3784-4-0x0000000005440000-0x0000000005452000-memory.dmp

      Filesize

      72KB

    • memory/3784-5-0x0000000005450000-0x000000000546E000-memory.dmp

      Filesize

      120KB

    • memory/3784-7-0x0000000005480000-0x0000000005495000-memory.dmp

      Filesize

      84KB

    • memory/3784-6-0x0000000005470000-0x000000000547A000-memory.dmp

      Filesize

      40KB

    • memory/3784-12-0x0000000005510000-0x0000000005525000-memory.dmp

      Filesize

      84KB