Overview

overview

8

Static

static

64cedafe14...84.exe

windows7-x64

8

64cedafe14...84.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    64cedafe145c21a596d5479196862d1937606832c638c8c32074249858a83f84.exe

  • Size

    832KB

  • MD5

    81c7c91ee9a67c08996170ce930ddeb0

  • SHA1

    978d0bba87849bf8404dbb22098d78e44a639c8e

  • SHA256

    64cedafe145c21a596d5479196862d1937606832c638c8c32074249858a83f84

  • SHA512

    0ebcdbf25a7b3e69fd22f4570bac31f887e06882887f46c188d622271363a5b2bf7927eb96d9a64f8bf6f36054a9926cbc900f51cde91c1da1caca3a14a0c93c

  • SSDEEP

    24576:8Dp1+iPVpR5zmq+0iDXI1EcT8+9oxGLXCx:89R9HsX+7T8+eAjC

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\64cedafe145c21a596d5479196862d1937606832c638c8c32074249858a83f84.exe
    "C:\Users\Admin\AppData\Local\Temp\64cedafe145c21a596d5479196862d1937606832c638c8c32074249858a83f84.exe"
    1⤵
      PID:2824
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 292
        2⤵
        • Program crash
        PID:3764
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2824 -ip 2824
      1⤵
        PID:2308

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2824-132-0x0000000000400000-0x000000000063E000-memory.dmp

        Filesize

        2.2MB

        Download