Analysis

  • max time kernel
    94s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2024, 08:09

General

  • Target

    $0/resulturl.exe

  • Size

    25KB

  • MD5

    f243a39a397d7074f5cf5efb783d0964

  • SHA1

    4da1a00503de78a6a1d55fca739dd4088fe7faca

  • SHA256

    b6ba552ec4bb7870baba47ca3c9a4071cb89396a1730e791a77b215ca0aff898

  • SHA512

    f7536420a6008b5b459abc8ce970de3ac4c7fc651ec9651ea894e474faecfc616a93279bdd85541fd0c74566059fd1fb2fdbcd42a72bc548e5e4328c7199ebfd

  • SSDEEP

    768:L3E6tM6TYIFXTa9DqJujrQcnvRB8haBalE:L3E6tMTIFXTIDqJkQcv38blE

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\$0\resulturl.exe
    "C:\Users\Admin\AppData\Local\Temp\$0\resulturl.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:840
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 840 -s 228
      2⤵
      • Program crash
      PID:3264
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 840 -ip 840
    1⤵
      PID:3256

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads