Analysis

  • max time kernel
    122s
  • max time network
    54s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 01:22

General

  • Target

    07b080378ef18e0022950786461673edae1329b148287ab4df9cf694dcb0ff01.exe

  • Size

    24KB

  • MD5

    003b4e9e97d8cafd72de95cd3161ee71

  • SHA1

    c941b73a99030b7fed95f157e57e6282f161d5f3

  • SHA256

    07b080378ef18e0022950786461673edae1329b148287ab4df9cf694dcb0ff01

  • SHA512

    a9edffe30452eb43e56daa860fa0732d1d10c7b9de19ba2f06abf3249a0da07b079ca0bda47186926479afa328f70d65b43f61c67b4751d9d85006c8987e24c7

  • SSDEEP

    192:FVn6RBWGE4hAjpH7Zdl3u6qsi7/AUzbUxM14zGoKy:FVn6RtAL+2iTAw7Ny

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\07b080378ef18e0022950786461673edae1329b148287ab4df9cf694dcb0ff01.exe
    "C:\Users\Admin\AppData\Local\Temp\07b080378ef18e0022950786461673edae1329b148287ab4df9cf694dcb0ff01.exe"
    1⤵
      PID:4848
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 252
        2⤵
        • Program crash
        PID:4760
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 264
        2⤵
        • Program crash
        PID:3496
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4848 -ip 4848
      1⤵
        PID:4136
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4848 -ip 4848
        1⤵
          PID:1472

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4848-132-0x0000000000400000-0x0000000000415000-memory.dmp

          Filesize

          84KB