Analysis

  • max time kernel
    119s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 09:48

General

  • Target

    0953145a5d858f34313dec86fb338fe5e3f4b73bea15849e1aff77dd0fe719f3.exe

  • Size

    429KB

  • MD5

    7c2288556a2cfcde258e7c5a16b33588

  • SHA1

    5aadb5bb45269efe7b79cab3ed56365d7df85866

  • SHA256

    0953145a5d858f34313dec86fb338fe5e3f4b73bea15849e1aff77dd0fe719f3

  • SHA512

    e6287b0f763965ec35e5d2822d4e3d94d9356f6f213a34dc050505c90c41d7b541833d41e8479614ce661da40d00ccc040858f2757836f1798edbc66e47e1fa8

  • SSDEEP

    12288:s9dGC5sy/y/yS5Z5syS5Z5Z5sy/yS5Z5H:BGaaSeaI

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0953145a5d858f34313dec86fb338fe5e3f4b73bea15849e1aff77dd0fe719f3.exe
    "C:\Users\Admin\AppData\Local\Temp\0953145a5d858f34313dec86fb338fe5e3f4b73bea15849e1aff77dd0fe719f3.exe"
    1⤵
      PID:4980
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 296
        2⤵
        • Program crash
        PID:4708
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4980 -ip 4980
      1⤵
        PID:4580

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4980-132-0x0000000000400000-0x0000000000408D64-memory.dmp

              Filesize

              35KB

            • memory/4980-133-0x00000000004E0000-0x00000000004F1000-memory.dmp

              Filesize

              68KB