Analysis

  • max time kernel
    96s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 08:10

General

  • Target

    273925bae413840e3e3740bbddba4c54f58a082098dc3ea7a3a6dd9a975d810f.exe

  • Size

    214KB

  • MD5

    7ac0889c5d8c765f69497be1648f4bc4

  • SHA1

    0bea3700ce28b6eef0058b6fd3894051ffd4757b

  • SHA256

    273925bae413840e3e3740bbddba4c54f58a082098dc3ea7a3a6dd9a975d810f

  • SHA512

    44bfba79b7db7447f1d95617b1fc7c096d3c403c53ffa27dc7b8ec1659fce47f901414799e096b15ec5d74a06380de7ff5ddfd3b0e756560b61effc0e81c808c

  • SSDEEP

    3072:28Zc0hTH53F/y0nzTd6UjIWVvn+opUgqMfX6ahha2xYdQ3HJ4c:W0XXzxHhvMg9PLxYdQ3p4c

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\273925bae413840e3e3740bbddba4c54f58a082098dc3ea7a3a6dd9a975d810f.exe
    "C:\Users\Admin\AppData\Local\Temp\273925bae413840e3e3740bbddba4c54f58a082098dc3ea7a3a6dd9a975d810f.exe"
    1⤵
      PID:4972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 508
        2⤵
        • Program crash
        PID:4152
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4972 -ip 4972
      1⤵
        PID:4872

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4972-132-0x0000000000400000-0x000000000043A000-memory.dmp

              Filesize

              232KB