Analysis

  • max time kernel
    79s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2022, 01:25

General

  • Target

    1ff02f8a0ae7a911013f2376736f0fec439791ee89c498dcc16fb198bfd7649d.exe

  • Size

    321KB

  • MD5

    5110ce836f151fdb4a7dacc4169e8340

  • SHA1

    f3df538ebbc781dabc54a7354936ea40922f8405

  • SHA256

    1ff02f8a0ae7a911013f2376736f0fec439791ee89c498dcc16fb198bfd7649d

  • SHA512

    188064d7a23dc65ae513b3e5ee8461e4b569174c5332c94554c4e0cc128f2dc9a31c51e53994cdcd1f41371cc4461fbfa694448598ad9ee6eedb227ec536ab3b

  • SSDEEP

    6144:DDSjz4yzaRs4JdofwuQVcPv77p7KfTRAlv:+Usa6YXcPT7pmLe

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1ff02f8a0ae7a911013f2376736f0fec439791ee89c498dcc16fb198bfd7649d.exe
    "C:\Users\Admin\AppData\Local\Temp\1ff02f8a0ae7a911013f2376736f0fec439791ee89c498dcc16fb198bfd7649d.exe"
    1⤵
      PID:5016
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 5016 -s 1020
        2⤵
        • Program crash
        PID:3448
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 184 -p 5016 -ip 5016
      1⤵
        PID:5036

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/5016-132-0x0000000000DE0000-0x0000000000E38000-memory.dmp

              Filesize

              352KB

            • memory/5016-133-0x00007FFD10110000-0x00007FFD10BD1000-memory.dmp

              Filesize

              10.8MB

            • memory/5016-134-0x00007FFD10110000-0x00007FFD10BD1000-memory.dmp

              Filesize

              10.8MB