Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13-11-2024 06:39

General

  • Target

    74f3b07f8b75aee6ccdbfe044559d76ccd4b827e489b16a13b7a62ad999e284dN.exe

  • Size

    437KB

  • MD5

    630b118b5b990a323cab64ec0998f7d0

  • SHA1

    013521af24b1743a68316850b9e0ba78b3bb5ccf

  • SHA256

    74f3b07f8b75aee6ccdbfe044559d76ccd4b827e489b16a13b7a62ad999e284d

  • SHA512

    bdc3f24508f9de54e8a30ce533152407e812cb928b3a07babab3aac679c15444a192da21e65a85168da0620689046c8379bff8462c26aaa1887763bfad6ac5f5

  • SSDEEP

    3072:N3r0XdApX+/E6Dlzg7S40L5Ykop0tEFbFFPwV737tW1+WphsDJrpgwWJLPtYEjAS:NYXqpet5tE9wVdWsOsDNKvQARWato1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\74f3b07f8b75aee6ccdbfe044559d76ccd4b827e489b16a13b7a62ad999e284dN.exe
    "C:\Users\Admin\AppData\Local\Temp\74f3b07f8b75aee6ccdbfe044559d76ccd4b827e489b16a13b7a62ad999e284dN.exe"
    1⤵
      PID:2644
      • C:\Windows\System32\werfault.exe
        \??\C:\Windows\System32\werfault.exe
        2⤵
          PID:2784

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2644-2-0x0000000077C31000-0x0000000077D32000-memory.dmp

        Filesize

        1.0MB

      • memory/2644-0-0x0000000077C30000-0x0000000077DD9000-memory.dmp

        Filesize

        1.7MB

      • memory/2784-1-0x00000000000B0000-0x00000000000C4000-memory.dmp

        Filesize

        80KB