Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 17:24

General

  • Target

    b1d9731f1094d977d68d4e7102399dfc82015e4ec0950b5b37058faa6119fa2a.exe

  • Size

    477KB

  • MD5

    24b1fa7a21d9915cf9afff190a5133b0

  • SHA1

    044eca97091d142eb04e726f6fc5a6dc697a9a1e

  • SHA256

    b1d9731f1094d977d68d4e7102399dfc82015e4ec0950b5b37058faa6119fa2a

  • SHA512

    ddadce13fd096ec74edf40146a104aa4d41730347551f98d7f1fd719c0434bd037c5de91be2f30d19644a779808e152970bb56dd6980aefbfb77ba0d0c057851

  • SSDEEP

    6144:baF5oXpcFb5DRsNxIG4peR4S6VNsy5PV1:2FmZcZlyN94peeS6VvZT

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1d9731f1094d977d68d4e7102399dfc82015e4ec0950b5b37058faa6119fa2a.exe
    "C:\Users\Admin\AppData\Local\Temp\b1d9731f1094d977d68d4e7102399dfc82015e4ec0950b5b37058faa6119fa2a.exe"
    1⤵
      PID:4208
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4208 -s 284
        2⤵
        • Program crash
        PID:3748
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4208 -ip 4208
      1⤵
        PID:916

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4208-132-0x000000004AD00000-0x000000004AD7A000-memory.dmp

        Filesize

        488KB

      • memory/4208-133-0x000000004AD00000-0x000000004AD7A000-memory.dmp

        Filesize

        488KB