Analysis

  • max time kernel
    93s
  • max time network
    109s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2022, 01:10

General

  • Target

    b4ab5bfca405cc757618f353a0727fe23ba4b0198284af421b29cb51489bea06.exe

  • Size

    26KB

  • MD5

    57e31f1b7367387c1b4016f3f269913d

  • SHA1

    8c9a286fdbe94f8de7a5be09de057bad04d3e402

  • SHA256

    b4ab5bfca405cc757618f353a0727fe23ba4b0198284af421b29cb51489bea06

  • SHA512

    2c2f719b1038752ff9c01cc2ec5aac70e305007309c9b42f5c27cad08658e24fe7c02a68d7c4ab11606804d04898f8339511eff18b914de7eda49d028571e22e

  • SSDEEP

    384:Zn30RuanveJ+doJ/Y1c5/U3JONG9TPeI112k4V3eJ0u+6:BE/KSJFPZp4V3q4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4ab5bfca405cc757618f353a0727fe23ba4b0198284af421b29cb51489bea06.exe
    "C:\Users\Admin\AppData\Local\Temp\b4ab5bfca405cc757618f353a0727fe23ba4b0198284af421b29cb51489bea06.exe"
    1⤵
      PID:4568
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 284
        2⤵
        • Program crash
        PID:5088
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4568 -ip 4568
      1⤵
        PID:5116

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4568-132-0x0000000000400000-0x000000000046F000-memory.dmp

              Filesize

              444KB