Analysis

  • max time kernel
    143s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    29-03-2022 23:26

General

  • Target

    1656-66-0x0000000000070000-0x00000000000A8000-memory.exe

  • Size

    224KB

  • MD5

    7221d1dcea5065924e7050abda7e489f

  • SHA1

    84d0e782849d7f28e7e1d636c6a1a99704f0e297

  • SHA256

    09a35d3d68f1a5d22b26543958ace293f211bf76b3f84809e08c706fbf51c7e9

  • SHA512

    6af68b687a1eb59ff98c4d6e8cc643d8e5cfc670cae6445cc7105464b79a5a17d2da729f129d8afa4724afab6b2b4cc7957e885b62e682ec1e7d88ab98c2c6f2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1656-66-0x0000000000070000-0x00000000000A8000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1656-66-0x0000000000070000-0x00000000000A8000-memory.exe"
    1⤵
      PID:4564
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4564 -s 84
        2⤵
        • Program crash
        PID:4704
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4564 -ip 4564
      1⤵
        PID:4324

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads