Analysis

  • max time kernel
    111s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/09/2022, 10:48

General

  • Target

    78132-181-0x0000000000750000-0x0000000000778000-memory.exe

  • Size

    160KB

  • MD5

    3ecf6fbf66d09998ceb6b5dac7f7c124

  • SHA1

    ec5f19ba7805ee536f1948eac7311961da4e283f

  • SHA256

    45383368f046a3c244e849de0ec25cabde751715c6b3f072893e9515aaa9043d

  • SHA512

    6e27c9b30e05276d4fbf96d9f9c5b50a86d015c145a92ebba1ecd5bca6ffabe638f4e891920f053d2aa5841725ae1dfc15dc3c7422ac64805ca2b269c4200320

  • SSDEEP

    3072:RYO/ZMTF1JcoA7hZMjlJXN2VLDFqyWPNhCSSb6:RYMZMB1JcoK6jPXNu7mNh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78132-181-0x0000000000750000-0x0000000000778000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\78132-181-0x0000000000750000-0x0000000000778000-memory.exe"
    1⤵
      PID:4300
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4300 -s 224
        2⤵
        • Program crash
        PID:1436
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4300 -ip 4300
      1⤵
        PID:4828

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads