Analysis

  • max time kernel
    90s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 21:52

General

  • Target

    df650c874da081a3020e3d90d3fd95c8b062ec9ab823614d0fe007947320485d.exe

  • Size

    395KB

  • MD5

    84f4915d2fa9f7b0cd1986acf933bff0

  • SHA1

    4cc2d9b2b99b0f997a6a00d5989008335d917ef4

  • SHA256

    df650c874da081a3020e3d90d3fd95c8b062ec9ab823614d0fe007947320485d

  • SHA512

    2711ba2f82dc482706cb7c67fae15de551dcf78d7ce946676d05c2601be326f0638d699a3bb41720d9c54ac838b7fe4a937f2b1fb5d87df983d53f4baad7c849

  • SSDEEP

    6144:wsiQpbh5kgiP0cFywUxZSGYpzzhGam/XS3k+PRD1GcoMfwnl+L2cfk:5ZbvBiz4wOSgaFk8noMonldcfk

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df650c874da081a3020e3d90d3fd95c8b062ec9ab823614d0fe007947320485d.exe
    "C:\Users\Admin\AppData\Local\Temp\df650c874da081a3020e3d90d3fd95c8b062ec9ab823614d0fe007947320485d.exe"
    1⤵
      PID:1884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 328
        2⤵
        • Program crash
        PID:3400
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1884 -ip 1884
      1⤵
        PID:1020

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1884-132-0x00000000021C0000-0x0000000002207000-memory.dmp

        Filesize

        284KB