Analysis

  • max time kernel
    91s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-10-2022 09:22

General

  • Target

    384-345-0x0000000000BD0000-0x0000000000BF8000-memory.exe

  • Size

    160KB

  • MD5

    b99f157d949eb7c1337c086e1042bc05

  • SHA1

    9a4981af24afb6a64fc381283321c7700ad0a708

  • SHA256

    cf29ca29fe6803ed8c621333716faac8081ec0e89b4bb1b25c6b531fa4d42668

  • SHA512

    d993bdecf04c1e184d6834df89a627ccb1a60b7749490ba05c20c19c1d3cc1dc94ec5185cd5b0f781b6dc21d1603ecd6821b8ddbb5b95041a7206d96919875dc

  • SSDEEP

    3072:WYO/ZMTFZFoI4T1prAvzDOroVsrDF1yRPlhXSSCP:WYMZMBZFoIOUnOnaplh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\384-345-0x0000000000BD0000-0x0000000000BF8000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\384-345-0x0000000000BD0000-0x0000000000BF8000-memory.exe"
    1⤵
      PID:2740
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 224
        2⤵
        • Program crash
        PID:2964
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2740 -ip 2740
      1⤵
        PID:788

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads