Analysis

  • max time kernel
    101s
  • max time network
    104s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250410-en
  • resource tags

    arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    23/04/2025, 08:50

General

  • Target

    5024-11-0x0000000000400000-0x0000000000442000-memory.exe

  • Size

    264KB

  • MD5

    ade469a1cb23371e297a8aefa416ffe6

  • SHA1

    bf5998d8995b0e68c7a4787131a81189f2030b30

  • SHA256

    90b75d0e42b33febcc9d25dfb2c1dd4baaabf53f52ba03990935010136165c76

  • SHA512

    830a249bee3051bc32389c29a4b38b6dada928bdc3d26453d2284fb635cd19e0eb1a5e5b5a853ead1ea9456ea8c31a2c58d2b1fa981ceafc1bebceb65a011cfa

  • SSDEEP

    3072:IPBayiq6lEAKt9sOW1IkTHo9rG8KaG5jnThTq0ufzz:eayiq6bA+Zsq8KaWTZ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5024-11-0x0000000000400000-0x0000000000442000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\5024-11-0x0000000000400000-0x0000000000442000-memory.exe"
    1⤵
      PID:5564
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5564 -s 8
        2⤵
        • Program crash
        PID:5536
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5564 -ip 5564
      1⤵
        PID:4772

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads