Overview

overview

3

Static

static

21b690e02e...fd.exe

windows7-x64

1

21b690e02e...fd.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 19:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    21b690e02e51cdae44bd58793d5b70c965b53ce4c2cb1133603e67afa06384fd.exe

  • Size

    122KB

  • MD5

    a499c31b125d3150a5e4d072eab9daaa

  • SHA1

    2a759b391252b8b332299614584bc9acfb1d4122

  • SHA256

    21b690e02e51cdae44bd58793d5b70c965b53ce4c2cb1133603e67afa06384fd

  • SHA512

    a9d7f861e3366e649e45f9538c97a7bacf8fa7d4ec6a07c69522948de0876f810096539295c0ed258feb4862f6c22d381968ba9bf162fba7c680db65698d7283

  • SSDEEP

    3072:ao+oD1NRsLHZwWTGE4SdMMvubntAqV44yohctsMdlpifWyR:AoD17sL5wWTuSdMWubtAc4ihcLHkHR

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\21b690e02e51cdae44bd58793d5b70c965b53ce4c2cb1133603e67afa06384fd.exe
    "C:\Users\Admin\AppData\Local\Temp\21b690e02e51cdae44bd58793d5b70c965b53ce4c2cb1133603e67afa06384fd.exe"
    1⤵
      PID:1076
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 456
        2⤵
        • Program crash
        PID:4628
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 500
        2⤵
        • Program crash
        PID:4948
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1076 -ip 1076
      1⤵
        PID:1468
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1076 -ip 1076
        1⤵
          PID:3136

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/1076-132-0x0000000000C40000-0x0000000000C63000-memory.dmp

                Filesize

                140KB

                Download