Overview

overview

3

Static

static

db966970f1...e0.exe

windows7-x64

3

db966970f1...e0.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2022 04:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    db966970f102a91fbaaa354aa6caabeb67b2d65949bba5eaed1d3b2cd5d287e0.exe

  • Size

    209KB

  • MD5

    63f117398ff0f9eae8d6e8b34682a00e

  • SHA1

    77ca3fc6951bd707ef6fff3154c98a6193c7c01c

  • SHA256

    db966970f102a91fbaaa354aa6caabeb67b2d65949bba5eaed1d3b2cd5d287e0

  • SHA512

    d85b81e5959d24caf64dd4b1847c238ce09264730276cdc520e2a6a7b8469e670d31c7afad161969bec908e41ed9df07cc7fc26119ebb5cad6d12a53aa7dcd84

  • SSDEEP

    3072:42aACAMfVxHsjqUwkMejsRk9dvR0FlgHIRXmUa9I1YcKmo8an5cy7Xrbyv7NB0P+:42dMQRvR0FZXp15KmOcabbU0PE99

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\db966970f102a91fbaaa354aa6caabeb67b2d65949bba5eaed1d3b2cd5d287e0.exe
    "C:\Users\Admin\AppData\Local\Temp\db966970f102a91fbaaa354aa6caabeb67b2d65949bba5eaed1d3b2cd5d287e0.exe"
    1⤵
      PID:836
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 836 -s 292
        2⤵
        • Program crash
        PID:2748
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 192 -p 836 -ip 836
      1⤵
        PID:4300

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/836-132-0x000000002F440000-0x000000002F478000-memory.dmp

        Filesize

        224KB

        Download