Analysis

  • max time kernel
    94s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 01:20

General

  • Target

    3126ab4debfd95cac64eda714a68bf00N.exe

  • Size

    3.8MB

  • MD5

    3126ab4debfd95cac64eda714a68bf00

  • SHA1

    b7e71b1b36b31f353fe33287cd128103f9f63c66

  • SHA256

    b7d6e8895d726e0d3fbaee1e23049155b2bd8434bacd41a4576faf6259d6fd59

  • SHA512

    263da26d65031cfd3c132d53874e1a4d6b8a0329b14ae59cccd392f44ca225b2cc8b035bfcc06a52c55370cefbde0ddcb801018e4bf6931cd2fe16ffc71d490e

  • SSDEEP

    98304:nE0Ut5B6aEjEJ3YaNHWzgN+FmWoh5t62n/2YFkS:Tw5B6BEqav+Fmf7n/tGS

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3126ab4debfd95cac64eda714a68bf00N.exe
    "C:\Users\Admin\AppData\Local\Temp\3126ab4debfd95cac64eda714a68bf00N.exe"
    1⤵
      PID:4492
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 372
        2⤵
        • Program crash
        PID:2060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 380
        2⤵
        • Program crash
        PID:956
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4492 -ip 4492
      1⤵
        PID:1636
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4492 -ip 4492
        1⤵
          PID:628

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4492-0-0x00000000020F0000-0x000000000240A000-memory.dmp

          Filesize

          3.1MB

        • memory/4492-1-0x0000000002410000-0x0000000002726000-memory.dmp

          Filesize

          3.1MB

        • memory/4492-2-0x0000000002730000-0x0000000002A44000-memory.dmp

          Filesize

          3.1MB

        • memory/4492-17-0x0000000002B50000-0x0000000002E54000-memory.dmp

          Filesize

          3.0MB

        • memory/4492-16-0x0000000002730000-0x0000000002A44000-memory.dmp

          Filesize

          3.1MB

        • memory/4492-15-0x0000000002730000-0x0000000002A44000-memory.dmp

          Filesize

          3.1MB

        • memory/4492-18-0x0000000000400000-0x0000000000428000-memory.dmp

          Filesize

          160KB

        • memory/4492-19-0x0000000002410000-0x0000000002726000-memory.dmp

          Filesize

          3.1MB