Analysis

  • max time kernel
    160s
  • max time network
    190s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    12-06-2022 09:12

General

  • Target

    213e4827d42aef81608f8849577b71c5e1d8aa3cd1334bbc4de14e0d2d7b6559.exe

  • Size

    511KB

  • MD5

    961cc27efc97bc6fab6b9efa0b04fbe8

  • SHA1

    b830e337c4161fff1ec1152cabdf0b86b11ba804

  • SHA256

    213e4827d42aef81608f8849577b71c5e1d8aa3cd1334bbc4de14e0d2d7b6559

  • SHA512

    f8ab61e299dafd261fd1670d31d559cad1173299a3e11ff8e6246d37fe469f9b8b3664db4cbecfb39ecdf3214ad9c3d5d74ddcc4849ff380f842526a5b9a393a

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\213e4827d42aef81608f8849577b71c5e1d8aa3cd1334bbc4de14e0d2d7b6559.exe
    "C:\Users\Admin\AppData\Local\Temp\213e4827d42aef81608f8849577b71c5e1d8aa3cd1334bbc4de14e0d2d7b6559.exe"
    1⤵
      PID:4776
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4776 -s 1192
        2⤵
        • Program crash
        PID:3140
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4776 -ip 4776
      1⤵
        PID:5116

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4776-130-0x0000000000572000-0x0000000000575000-memory.dmp

        Filesize

        12KB

      • memory/4776-131-0x0000000000573000-0x0000000000575000-memory.dmp

        Filesize

        8KB

      • memory/4776-132-0x0000000000400000-0x0000000000485000-memory.dmp

        Filesize

        532KB

      • memory/4776-133-0x0000000000573000-0x0000000000575000-memory.dmp

        Filesize

        8KB

      • memory/4776-134-0x0000000000400000-0x0000000000485000-memory.dmp

        Filesize

        532KB