Analysis

  • max time kernel
    90s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 12:11

General

  • Target

    b3d48a798f0f691bd18eb5647477aeaa3e69c9f0a312000102a043959a9c70d3.exe

  • Size

    212KB

  • MD5

    4928f3f8f08ad208d6ce13e28eed87a0

  • SHA1

    ad31a3e19ec38ca833c64a4dae251d5b3757d67f

  • SHA256

    b3d48a798f0f691bd18eb5647477aeaa3e69c9f0a312000102a043959a9c70d3

  • SHA512

    2a668f445589a6185e17e4edd9f1bdc7fac5b1ed638439f54be84b9ccd288f9a07843cd5188c4856ea6337b8da1aa8d68cd70789c96747c57ed4e8bddae42cf6

  • SSDEEP

    6144:oqCxYyeuLLKcy4AwhraW4x8Vu5BGQkfR25hol:oVYtXcy4EauRYR23ol

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b3d48a798f0f691bd18eb5647477aeaa3e69c9f0a312000102a043959a9c70d3.exe
    "C:\Users\Admin\AppData\Local\Temp\b3d48a798f0f691bd18eb5647477aeaa3e69c9f0a312000102a043959a9c70d3.exe"
    1⤵
      PID:2296
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 220
        2⤵
        • Program crash
        PID:3828
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2296 -ip 2296
      1⤵
        PID:1760

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2296-132-0x0000000000490000-0x000000000049D000-memory.dmp

        Filesize

        52KB