Analysis

  • max time kernel
    132s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 19:36

General

  • Target

    174ac8f5af10029bddb60763b1d06b0f55909e86bbd414a9e1cf9dad54d57f19.exe

  • Size

    28KB

  • MD5

    91c83448ff901ca3ae6e147ed1bdfa20

  • SHA1

    6aefcdaf0aa582c19acd9c2545168c497df1d3c6

  • SHA256

    174ac8f5af10029bddb60763b1d06b0f55909e86bbd414a9e1cf9dad54d57f19

  • SHA512

    9b7ee9ad86f93994c1f6c360e6be19caf62560b4de67b5cb8fe64b32a842c724d1b7600f981384114eb6e31b179d88bd679947c14ae70803a94a7ae27d19054b

  • SSDEEP

    384:/TRqWR6tYIcKGoTiUgW4rZXrOv1cXs+7OTs9yiMdoTLwK:/9qgg2UACv1asLoMi+o/P

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\174ac8f5af10029bddb60763b1d06b0f55909e86bbd414a9e1cf9dad54d57f19.exe
    "C:\Users\Admin\AppData\Local\Temp\174ac8f5af10029bddb60763b1d06b0f55909e86bbd414a9e1cf9dad54d57f19.exe"
    1⤵
      PID:4056
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4056 -s 408
        2⤵
        • Program crash
        PID:1264
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4056 -ip 4056
      1⤵
        PID:4240

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4056-132-0x0000000000400000-0x0000000000407000-memory.dmp

        Filesize

        28KB

      • memory/4056-133-0x0000000000400000-0x0000000000407000-memory.dmp

        Filesize

        28KB