Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 23:48
General
-
Target
476-95-0x0000000000400000-0x0000000000463000-memory.exe
-
Size
396KB
-
MD5
03edaae15ecaf6fa1a8f123a67a2226c
-
SHA1
821c09dbc4eeaaea9a36f4006f86f58c5f4fbecc
-
SHA256
429f5ce699b8c9c096729d806713d3821e7ce9f0bc33455e8e1c5aef9e2ee107
-
SHA512
2b3a18743afbd27bd447922e1c45097063f970c25791ad40ceca41b8f0d1ea9b2b2fc051e621fa495fafe8ef940769a5de60868cf0018051c9f9d95ee801be01
-
SSDEEP
6144:K9GhDo9lwhOM5M1v3KmakxxgpxGUV+Hk9s4CCDz4K:CGhilwxHmakx4GUgEs4CCf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\476-95-0x0000000000400000-0x0000000000463000-memory.exe"C:\Users\Admin\AppData\Local\Temp\476-95-0x0000000000400000-0x0000000000463000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 2162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2296 -ip 22961⤵