Analysis

  • max time kernel
    144s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 19:20

General

  • Target

    e82df120f0ad5f794f321d6134f4c92cc0592b222659f4879cedaf9989f48db5.exe

  • Size

    168KB

  • MD5

    963b510b86f66535f15f03e11d0c0302

  • SHA1

    7d9a8382ebbf5114317c77eb6bbc42f5499fea1d

  • SHA256

    e82df120f0ad5f794f321d6134f4c92cc0592b222659f4879cedaf9989f48db5

  • SHA512

    1649dacb7c8c3353118fe80ec6f919bd5e8c6b8be100410dc44f6d39584569cf546baee39c425764ab99c4aed205e1c86fb18d51d5587589bc272c36ebc5a9ff

  • SSDEEP

    1536:dlGNV8UrvwB55VI4IIOmN8vr3z0UQrfsXmMqG4e8hy4K/teP3cU0lJGBJJUv9tRU:wV8UrppIX8n4zoX4K+cUkJyQVAP/N

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e82df120f0ad5f794f321d6134f4c92cc0592b222659f4879cedaf9989f48db5.exe
    "C:\Users\Admin\AppData\Local\Temp\e82df120f0ad5f794f321d6134f4c92cc0592b222659f4879cedaf9989f48db5.exe"
    1⤵
      PID:3480
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 376
        2⤵
        • Program crash
        PID:4732
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3480 -ip 3480
      1⤵
        PID:712

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3480-132-0x0000000000400000-0x0000000000432000-memory.dmp

              Filesize

              200KB

            • memory/3480-133-0x0000000000400000-0x0000000000432000-memory.dmp

              Filesize

              200KB