Analysis

  • max time kernel
    119s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 06:01

General

  • Target

    3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe

  • Size

    775KB

  • MD5

    6187751b06461843bbeba37e4998a820

  • SHA1

    70692878fc0823fa9b6f685beafb8f41e953b919

  • SHA256

    3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58

  • SHA512

    bd444516a0e74f2e1afb8006eabcdc10a19254df626fcad9ef9d4aa3246a56ce27a461f62f99d0c9ae3add26224afbe7b8f4df60aa42a43707c09f81819f5a4d

  • SSDEEP

    24576:JA3YZXk7Pm3pl7fgXBIo5yzoXvIdKNQcbWyqgf5E:JzSUIXBIoczofI1M/fq

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe
    "C:\Users\Admin\AppData\Local\Temp\3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe"
    1⤵
      PID:4800
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 576
        2⤵
        • Program crash
        PID:1512
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 568
        2⤵
        • Program crash
        PID:4488
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4800 -ip 4800
      1⤵
        PID:5056
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4800 -ip 4800
        1⤵
          PID:1284

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4800-132-0x0000000000400000-0x000000000056F000-memory.dmp

          Filesize

          1.4MB

        • memory/4800-133-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-134-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-135-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-136-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-137-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-138-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-139-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-140-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-141-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4800-142-0x0000000000400000-0x000000000056F000-memory.dmp

          Filesize

          1.4MB

        • memory/4800-143-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB