Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
04/03/2026, 01:03
General
- Target SecuriteInfo.com.FileRepMalware.76928771.exe
- Size 11.6MB
- Sample260304-behb5abs71
- SHA256 231ebbfd680cee62d1c4a2ea1b44686c311bfc94a1fe57af3a41ef4b08797c95
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Program crash 4 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.FileRepMalware.76928771.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.FileRepMalware.76928771.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3428 -s 7042⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3428 -s 7122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3428 -s 3322⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3428 -s 7002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3428 -ip 34281⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 3428 -ip 34281⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3428 -ip 34281⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3428 -ip 34281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3428-0-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-1-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-15-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-11-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-9-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-7-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-6-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-4-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-23-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-427-0x0000000077B72000-0x0000000077B73000-memory.dmp
memory/3428-518-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-567-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-677-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-669-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-662-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-655-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-644-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-637-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-630-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-623-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-616-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-609-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-602-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-595-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-588-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-581-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-574-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-560-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-553-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-546-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-539-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-532-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-525-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-511-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-504-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-497-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-490-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-483-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-476-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-469-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-453-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-450-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-447-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-462-0x0000000001B80000-0x0000000001BD6000-memory.dmp
memory/3428-455-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-444-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-442-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-441-0x000000007EF50000-0x000000007EF51000-memory.dmp
memory/3428-839-0x000000007F100000-0x000000007F101000-memory.dmp
memory/3428-826-0x000000007F000000-0x000000007F05B000-memory.dmp
memory/3428-1001-0x0000000001710000-0x0000000001713000-memory.dmp
memory/3428-1052-0x00000000037C0000-0x000000000381D000-memory.dmp
memory/3428-1191-0x0000000003960000-0x00000000039BF000-memory.dmp
memory/3428-1363-0x0000000003960000-0x00000000039BF000-memory.dmp
memory/3428-1535-0x0000000003960000-0x00000000039BF000-memory.dmp