Analysis

  • max time kernel
    97s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-10-2022 05:34

General

  • Target

    13091331d36d34dde06d3fbba2b2d6e4ff011bf8584bc8d92d9ec9cc1fd5e465.exe

  • Size

    120KB

  • MD5

    621208ef0ba59508dfd50672d5b99a70

  • SHA1

    cdab16428649c0487833afc9a09b03441f481a1d

  • SHA256

    13091331d36d34dde06d3fbba2b2d6e4ff011bf8584bc8d92d9ec9cc1fd5e465

  • SHA512

    2d09409f242ace911b48b0ceea06ae81d6abb28b3534b3c4818208a9e7b79a7c983aa2656288765fcfbabf35c0e7045138fa4790720a27905357d47de4a911f1

  • SSDEEP

    1536:b+De8hJJZb8zMnHSxvFNfiIHlfsqSkazi:2nbLHqNfhiq+i

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13091331d36d34dde06d3fbba2b2d6e4ff011bf8584bc8d92d9ec9cc1fd5e465.exe
    "C:\Users\Admin\AppData\Local\Temp\13091331d36d34dde06d3fbba2b2d6e4ff011bf8584bc8d92d9ec9cc1fd5e465.exe"
    1⤵
      PID:1372
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 224
        2⤵
        • Program crash
        PID:1652
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1372 -ip 1372
      1⤵
        PID:2616

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1372-132-0x0000000000400000-0x000000000041E000-memory.dmp

        Filesize

        120KB

      • memory/1372-133-0x0000000000400000-0x000000000041E000-memory.dmp

        Filesize

        120KB