Overview

overview

6

Static

static

73886ea5c8...de.exe

windows7-x64

6

73886ea5c8...de.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    73886ea5c821022bbc668eb328f7fe9f6caa62e32f8f37d3bc16c5916775b6de.exe

  • Size

    71KB

  • MD5

    19187d9519d21d1bf383cad0769fa3b7

  • SHA1

    df2881730665a6c2a0799ccbd1cb1d78aa2bd92d

  • SHA256

    73886ea5c821022bbc668eb328f7fe9f6caa62e32f8f37d3bc16c5916775b6de

  • SHA512

    84759247083958b768c693e9cf39267aa77add99206108151d33910d172e76e1d13caadc94ea3acdb4a66f212b0a42fe25ed4da4f044c7e8b52c7ebae194fbb1

  • SSDEEP

    1536:eMQKzwcnBIK+k7u7rVWiktMUNPp+4WVHF9nisKldh:9Dzwcnj7u7rVWikKUNPp+NJj0V

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\73886ea5c821022bbc668eb328f7fe9f6caa62e32f8f37d3bc16c5916775b6de.exe
    "C:\Users\Admin\AppData\Local\Temp\73886ea5c821022bbc668eb328f7fe9f6caa62e32f8f37d3bc16c5916775b6de.exe"
    1⤵
      PID:4812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 472
        2⤵
        • Program crash
        PID:1476
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 480
        2⤵
        • Program crash
        PID:2860
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4812 -ip 4812
      1⤵
        PID:4976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4812 -ip 4812
        1⤵
          PID:1140

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4812-132-0x0000000001000000-0x0000000001015000-memory.dmp

                Filesize

                84KB

                Download