Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 19:16

General

  • Target

    2d43a71259ce5a652e57592804dab512d706101dce5d7d4663661e544d233a44.exe

  • Size

    54KB

  • MD5

    0bef063c6a6e16db514ed8965eab6700

  • SHA1

    9d9ecff83dc86ef1972b8baab25a06d24b72ed22

  • SHA256

    2d43a71259ce5a652e57592804dab512d706101dce5d7d4663661e544d233a44

  • SHA512

    f45c8ef810cc55a68fa865fc229c0c5cae7a805a6236aff5f44e4ae12dcdb005812950d3cc9c5830bf091a373ec9f9d9107ce84d094b8cf720fd4af268f67d16

  • SSDEEP

    1536:BLf7TCwn1Skrc7+79NUVx+tyzVdMAOoE1a:4w1SkrP79NUj+tyzUAOo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d43a71259ce5a652e57592804dab512d706101dce5d7d4663661e544d233a44.exe
    "C:\Users\Admin\AppData\Local\Temp\2d43a71259ce5a652e57592804dab512d706101dce5d7d4663661e544d233a44.exe"
    1⤵
      PID:2496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 432
        2⤵
        • Program crash
        PID:116
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2496 -ip 2496
      1⤵
        PID:4712

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2496-132-0x0000000001000000-0x0000000001011000-memory.dmp

        Filesize

        68KB