Overview

overview

3

Static

static

d98a28d59b...9f.exe

windows7-x64

3

d98a28d59b...9f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 20:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    d98a28d59b639ded16f1e6b2f3e92a6500b6d8472b420ac6f4e4957f88d2b79f.exe

  • Size

    2.8MB

  • MD5

    a0f1146d62ea87cd689d0b069edea021

  • SHA1

    df0136c5e22bca8e87c5a8e1c7872f908899a9c3

  • SHA256

    d98a28d59b639ded16f1e6b2f3e92a6500b6d8472b420ac6f4e4957f88d2b79f

  • SHA512

    c611d4ca7098dc95a9a2ccadcbac5171e4ee95b12231218fc22b0c8ba789467bdeb3ca6eb68684fe331a3233848eb53d5246d733bee71e7b4567f828e09f2d1d

  • SSDEEP

    24576:BG2ae80SaaaayAaaaaa2yeeGeaSa2a2SSEeAaaueEaama2aaaaSaaa2ae2g:B4I/eeEeXeK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d98a28d59b639ded16f1e6b2f3e92a6500b6d8472b420ac6f4e4957f88d2b79f.exe
    "C:\Users\Admin\AppData\Local\Temp\d98a28d59b639ded16f1e6b2f3e92a6500b6d8472b420ac6f4e4957f88d2b79f.exe"
    1⤵
      PID:1312
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 300
        2⤵
        • Program crash
        PID:3136
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1312 -ip 1312
      1⤵
        PID:1792

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1312-133-0x0000000001FA0000-0x0000000001FB1000-memory.dmp

              Filesize

              68KB

              Download

            • memory/1312-132-0x0000000000400000-0x0000000000408D64-memory.dmp

              Filesize

              35KB

              Download