Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-08-2024 11:53

General

  • Target

    4480-66-0x0000000000400000-0x0000000000596000-memory.exe

  • Size

    1.6MB

  • MD5

    7d8b9eb95a6a42f0867821eda3e7df68

  • SHA1

    441e8ac8785f1391f8c1d03765ce1505808df030

  • SHA256

    eab7f466646185d1790ade10731d591a539efb42905654ebd9e75cb9a46c2fe8

  • SHA512

    96b4ed38c42156457814f613fbbeffb482770300648d9a6b46461df8bf7db60d8c4106b64792db566e9d956eaf93cd2b3c9baf1d4814033204263b1e4a73769c

  • SSDEEP

    49152:1TbDJ4gnpFzjE0Z3Vhs1QLWLWGOdTNRs0u+:1TCgpFzjE0Z3rs1QLWCG

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4480-66-0x0000000000400000-0x0000000000596000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\4480-66-0x0000000000400000-0x0000000000596000-memory.exe"
    1⤵
      PID:4980
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 80
        2⤵
        • Program crash
        PID:2696
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4980 -ip 4980
      1⤵
        PID:3552

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads