Analysis

  • max time kernel
    123s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-10-2022 01:37

General

  • Target

    f52cf9173e74b9ed36a6ab33400a641b1c6d3ad16ef7a2f3809dafd282bbba26.exe

  • Size

    719KB

  • MD5

    57595583156c2f507b8945d77225bfa2

  • SHA1

    8144fb7c3be283a97398e4910edfcc8b13d466d6

  • SHA256

    f52cf9173e74b9ed36a6ab33400a641b1c6d3ad16ef7a2f3809dafd282bbba26

  • SHA512

    20323f2339e19745c7720f3395b08324255883b355d35ba78f6d1d2936126cc4635f18c110d50a1e427c0f3b00f2d12cd5212312818cf5b3faa779f7c8109391

  • SSDEEP

    12288:yES8HXqevJ2jCkhqFC5MWsqbBbbx5i1kVe:NxHvJxWqrWsiBJ5i12e

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f52cf9173e74b9ed36a6ab33400a641b1c6d3ad16ef7a2f3809dafd282bbba26.exe
    "C:\Users\Admin\AppData\Local\Temp\f52cf9173e74b9ed36a6ab33400a641b1c6d3ad16ef7a2f3809dafd282bbba26.exe"
    1⤵
      PID:3520
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 496
        2⤵
        • Program crash
        PID:2116
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 3520 -ip 3520
      1⤵
        PID:3392

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3520-132-0x0000000000FE0000-0x0000000001067000-memory.dmp

        Filesize

        540KB