Analysis

  • max time kernel
    90s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 02:33

General

  • Target

    a6085bf43c10f0d017a5f41b9da878ee453dfa29effd3eae6fce4f6ba45865a0.exe

  • Size

    308KB

  • MD5

    717a1f1e76516346bf2c5adbeea92b40

  • SHA1

    6e3cea2d6572629318feb0bbcaa319731cae945d

  • SHA256

    a6085bf43c10f0d017a5f41b9da878ee453dfa29effd3eae6fce4f6ba45865a0

  • SHA512

    8fe7f0286c117952c218d654e22df10b66ddc4c00b5f0ef892acdfa8644c49b41705b534f10846816b39acd8d65dfc05a71587c17594576d2f194ed5559ef21e

  • SSDEEP

    3072:nkJL7r1Tszc5fZKXXL79DfQfgh4P43T1fNe4KVt:n8Buc5fZoBphhxo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a6085bf43c10f0d017a5f41b9da878ee453dfa29effd3eae6fce4f6ba45865a0.exe
    "C:\Users\Admin\AppData\Local\Temp\a6085bf43c10f0d017a5f41b9da878ee453dfa29effd3eae6fce4f6ba45865a0.exe"
    1⤵
      PID:2824
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 408
        2⤵
        • Program crash
        PID:4900
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2824 -ip 2824
      1⤵
        PID:5056

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2824-132-0x0000000000400000-0x00000000004C0000-memory.dmp

        Filesize

        768KB

      • memory/2824-133-0x0000000000400000-0x00000000004C0000-memory.dmp

        Filesize

        768KB