Analysis

  • max time kernel
    4s
  • max time network
    9s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 08:29

General

  • Target

    fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe

  • Size

    95KB

  • MD5

    8292f72c80f4c051351811b0d0ddb703

  • SHA1

    db5fada9e4b73734bde28cf38e7f4473b5541636

  • SHA256

    fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420

  • SHA512

    ffe3b81183c243260a2de861a4e2f72159192e70387f46a61d11e1908ac05f033f66d5140d79a0eba6fa70dd3a46eba39598a86f80749a27138a089359d3dd46

  • SSDEEP

    1536:r+PqBtab/4QybgPTD8nf6bK6taRsTJOAX+Ftfd00oIkoDYmc:aGaD26bBtaIlX+Fld00oIkoDYmc

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe
    "C:\Users\Admin\AppData\Local\Temp\fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe"
    1⤵
      PID:3724
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 404
        2⤵
        • Program crash
        PID:5024
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 404
        2⤵
        • Program crash
        PID:4104
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3724 -ip 3724
      1⤵
        PID:5064
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3724 -ip 3724
        1⤵
          PID:4968

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads