Analysis

  • max time kernel
    114s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 22:06

General

  • Target

    4d2e4fef2e639d6fd43d8c5413f525dda5a6609ce3f3bea58832fdd0b4edb392.exe

  • Size

    84KB

  • MD5

    0047f3fedafd91659cba60d5d82253c0

  • SHA1

    ed5d522a7ba124143d9ecbfe8aa0dd5456631f63

  • SHA256

    4d2e4fef2e639d6fd43d8c5413f525dda5a6609ce3f3bea58832fdd0b4edb392

  • SHA512

    b194afe85347daec29589ffaa66d1b09b5e7b4aeae68065137af0f69e19be8d738cc6d7cf68e10cf2d5e0c64864ebc79aaaaf69f010d36e303cb3ab135ab5a3f

  • SSDEEP

    1536:Xck7NHHrtWrT+gJ4GHCd9+bhKfUvcVxHAs3qClQX2oooD+AyxArwIVJ9dvN5P:XBglJtiyLmxgsa8QXMmwI/F5P

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4d2e4fef2e639d6fd43d8c5413f525dda5a6609ce3f3bea58832fdd0b4edb392.exe
    "C:\Users\Admin\AppData\Local\Temp\4d2e4fef2e639d6fd43d8c5413f525dda5a6609ce3f3bea58832fdd0b4edb392.exe"
    1⤵
      PID:1308
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1308 -s 1076
        2⤵
        • Program crash
        PID:4292
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1308 -ip 1308
      1⤵
        PID:5076

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1308-132-0x0000000000400000-0x0000000000427000-memory.dmp

        Filesize

        156KB

      • memory/1308-133-0x0000000000400000-0x0000000000427000-memory.dmp

        Filesize

        156KB