Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    05/10/2022, 04:45

General

  • Target

    2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe

  • Size

    4.7MB

  • MD5

    d33055b4a90538689523cc97a56ca3be

  • SHA1

    d00bb4899a11457e4260e55f689cf31f35923b1c

  • SHA256

    2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b

  • SHA512

    4a4d5407a1e7403615d033124497e2e0688b9ff95891275dfd929b60030bb2571b0809756d8d0a88f37bd8295472a639309bea4a858f76bc3fc3d9fe29261d4c

  • SSDEEP

    98304:m2hwpKO+6PbFmS3VjVEOeTtJaAbLECnrZXJT7:mnbFmS3VjVEOeTtJHbdnrz7

Score
3/10

Malware Config

Signatures

  • Program crash 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe
    "C:\Users\Admin\AppData\Local\Temp\2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe"
    1⤵
      PID:2976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 524
        2⤵
        • Program crash
        PID:4904
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 500
        2⤵
        • Program crash
        PID:4964
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 568
        2⤵
        • Program crash
        PID:4992
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 612
        2⤵
        • Program crash
        PID:4396

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2976-116-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-117-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-118-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-119-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-120-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-121-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-122-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-123-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-124-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-125-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-126-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-127-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-128-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-129-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-130-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-131-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-132-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-133-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-134-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-135-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-136-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-137-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-138-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-139-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-140-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-141-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-142-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-143-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-144-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-145-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-146-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-147-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-148-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-149-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-150-0x0000000002FC0000-0x0000000003407000-memory.dmp

            Filesize

            4.3MB

          • memory/2976-152-0x0000000000400000-0x00000000008BC000-memory.dmp

            Filesize

            4.7MB

          • memory/2976-153-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-151-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-154-0x0000000077600000-0x000000007778E000-memory.dmp

            Filesize

            1.6MB

          • memory/2976-155-0x0000000000400000-0x00000000008BC000-memory.dmp

            Filesize

            4.7MB