Analysis

  • max time kernel
    91s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2022 07:24

General

  • Target

    7db577cabd771d7ed8668809f2790d18a34d8ac296e941abdeea311cbcd254ea.exe

  • Size

    964KB

  • MD5

    40a3dbca964d38fa65e4c3fd7a3fe306

  • SHA1

    16b1944d546367aa8f418761bae5bc913af33f44

  • SHA256

    7db577cabd771d7ed8668809f2790d18a34d8ac296e941abdeea311cbcd254ea

  • SHA512

    20bd38dd962bf1a292c921dff7283e87b5343b85be11c53e1daf624daf95c899bad236f4b7d235d92103d63a002c2f2805b520f746b1f267e88d05626a23afb0

  • SSDEEP

    24576:53dD48wYDr5GBsx7okpMicK/cRgOnmq9g62TRXJy6nR:VdrwYrgBc7TpbcOU7m62TrDR

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7db577cabd771d7ed8668809f2790d18a34d8ac296e941abdeea311cbcd254ea.exe
    "C:\Users\Admin\AppData\Local\Temp\7db577cabd771d7ed8668809f2790d18a34d8ac296e941abdeea311cbcd254ea.exe"
    1⤵
      PID:756
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 756 -s 396
        2⤵
        • Program crash
        PID:4968
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 756 -s 400
        2⤵
        • Program crash
        PID:4908
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 756 -ip 756
      1⤵
        PID:4640
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 756 -ip 756
        1⤵
          PID:5008

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/756-132-0x0000000000400000-0x00000000005CC000-memory.dmp

          Filesize

          1.8MB

        • memory/756-133-0x0000000000400000-0x00000000005CC000-memory.dmp

          Filesize

          1.8MB

        • memory/756-134-0x0000000000400000-0x00000000005CC000-memory.dmp

          Filesize

          1.8MB