Analysis
-
max time kernel
53s -
max time network
72s -
platform
windows10-1703_x64 -
resource
win10-20220722-en -
resource tags
arch:x64arch:x86image:win10-20220722-enlocale:en-usos:windows10-1703-x64system -
submitted
07-08-2022 09:15
Behavioral task
behavioral1
Sample
5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f.exe
Resource
win10-20220722-en
windows10-1703-x64
1 signatures
150 seconds
General
-
Target
5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f.exe
-
Size
464KB
-
MD5
670688e97df1e1cba9f5fcf5d2240726
-
SHA1
2790be3780b1fbe6606a221f0d82504b5b376478
-
SHA256
5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f
-
SHA512
ae5c110dc100456ea12b5ce30f64358e77e43ae81678e093323ce3c5f257de7b049c08d5bf20471aeb814f8eb045542ebe5096b7ec681aae8111c08e886d31d1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3840 2672 WerFault.exe 5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f.exe"C:\Users\Admin\AppData\Local\Temp\5de70ceb083241ffdd828e8aac6a94bb5ffd859f7dd658ededba8eb9dc439e0f.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 5762⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2672-127-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-128-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-129-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-130-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-131-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-132-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-133-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-134-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-135-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-136-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-137-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-138-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-139-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-140-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-141-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-142-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-143-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-144-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-145-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-146-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-147-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-148-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-149-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-150-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-151-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-152-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-153-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-154-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-155-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-156-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-157-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-159-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-160-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-161-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-162-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-158-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-163-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-164-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB
-
memory/2672-165-0x0000000077310000-0x000000007749E000-memory.dmpFilesize
1.6MB