Analysis

  • max time kernel
    95s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 21:55

General

  • Target

    576a4fa489787684c4e65b1e9079999179417a7dcd5176344f2c9ce1d1c304f0.exe

  • Size

    6.8MB

  • MD5

    dd148d53a45682d876dcc17f8c60207e

  • SHA1

    04fa42dbff1754af5dc18a9a7298b07ec3fc5afb

  • SHA256

    576a4fa489787684c4e65b1e9079999179417a7dcd5176344f2c9ce1d1c304f0

  • SHA512

    d4d24168cdc475375c9ce3e9eee4c17c58655e4091ac239c7f100ed42a1bc9f21b0075cf0ff6f68f11c5f41eac55b404de2cc192e1ab45a15f3787ae5ab17cda

  • SSDEEP

    98304:5GzCdMA7hXzFdC9nUrZ7EUmofQvTlA5+ySc6Jq9cVMAF:szCdMA7hXzFeUd45ofgTlDpMAF

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\576a4fa489787684c4e65b1e9079999179417a7dcd5176344f2c9ce1d1c304f0.exe
    "C:\Users\Admin\AppData\Local\Temp\576a4fa489787684c4e65b1e9079999179417a7dcd5176344f2c9ce1d1c304f0.exe"
    1⤵
      PID:1628
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 828
        2⤵
        • Program crash
        PID:3816
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1628 -ip 1628
      1⤵
        PID:1356

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1628-0-0x0000000074CBE000-0x0000000074CBF000-memory.dmp

        Filesize

        4KB

      • memory/1628-1-0x0000000000E70000-0x0000000001540000-memory.dmp

        Filesize

        6.8MB