Overview

overview

3

Static

static

b5ea716486...89.exe

windows7-x64

3

b5ea716486...89.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    137s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-10-2022 03:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b5ea716486afe648235ed6e79613455c59956929e55043167a73204703940f89.exe

  • Size

    312KB

  • MD5

    805b86c1c3c2bef916fb1bf1cf966950

  • SHA1

    a51c62b39db0ce8e9248502b3a47be8869601d5c

  • SHA256

    b5ea716486afe648235ed6e79613455c59956929e55043167a73204703940f89

  • SHA512

    c005fe8695f8de3406a47ffb96847a782ff70ccb8705c7cd9de8da0c1e13e3009b06f97264689cc41963a715ba86867b98c83d06f352ef13b706e7f0c276df3b

  • SSDEEP

    6144:ovzzb3jQEri3kVGOlPoopYZ4jsq/mndOtsQbmwBGg/jmTndpzo0naGq:ovD3jQe5VGGQouOmwB5EdpPaGq

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b5ea716486afe648235ed6e79613455c59956929e55043167a73204703940f89.exe
    "C:\Users\Admin\AppData\Local\Temp\b5ea716486afe648235ed6e79613455c59956929e55043167a73204703940f89.exe"
    1⤵
      PID:2728
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2728 -s 516
        2⤵
        • Program crash
        PID:1368
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2728 -ip 2728
      1⤵
        PID:396

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2728-132-0x0000000000400000-0x0000000000451000-memory.dmp

        Filesize

        324KB

        Download