Overview

overview

3

Static

static

20c9a25e87...47.exe

windows7_x64

1

20c9a25e87...47.exe

windows10-2004_x64

3

Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    12-06-2022 11:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20c9a25e8728eaf2e4e63cc009658433fce047a67625c9d9e451b2dbd8cae247.exe

  • Size

    238KB

  • MD5

    a3240591fe7d61aa5bdb8480d48d2e67

  • SHA1

    5f72383d1a409376ecb95aed4e984e259772dc58

  • SHA256

    20c9a25e8728eaf2e4e63cc009658433fce047a67625c9d9e451b2dbd8cae247

  • SHA512

    c3d5cf571e9174c134dbb5b7fd05b3bc1353446bcbe0fc3ae3459bf1b123173df92405dcec5e028e65b03a1334982e567f2f3883981767236c22644a079ccaf0

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20c9a25e8728eaf2e4e63cc009658433fce047a67625c9d9e451b2dbd8cae247.exe
    "C:\Users\Admin\AppData\Local\Temp\20c9a25e8728eaf2e4e63cc009658433fce047a67625c9d9e451b2dbd8cae247.exe"
    1⤵
      PID:932
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 932 -s 420
        2⤵
        • Program crash
        PID:4788
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 932 -s 420
        2⤵
        • Program crash
        PID:4624
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 932 -ip 932
      1⤵
        PID:4384
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 932 -ip 932
        1⤵
          PID:2524

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/932-130-0x0000000000700000-0x000000000073F000-memory.dmp

          Filesize

          252KB

          Download