Analysis

  • max time kernel
    52s
  • max time network
    143s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    04/11/2022, 02:17

General

  • Target

    abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe

  • Size

    180KB

  • MD5

    c1aedd3a7e2cf94dc3931319196a5fb8

  • SHA1

    45c71f87af03fbb3494db2327befdc0d09a062db

  • SHA256

    abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d

  • SHA512

    238a150078f7d4cf4ea9218d801ac2a0dd00c9152f73ad02e8acc37e32dc80287bc69691c03e638d1767336b064598c97f537a59472c132fe8dfc09811281fdf

  • SSDEEP

    3072:zEb7MFabD850Q2T9gb6sWujYQoWX2OxB9eBw/qOXJ6ntTFx27Q1sA8KCYJ:zEc8bcP6Eqs24B9mIqYJutTFxFNAYJ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe
    "C:\Users\Admin\AppData\Local\Temp\abd675c4882ccebea611457f5c285488dc22229b46f55382c71c1e8b4807f87d.exe"
    1⤵
      PID:2620
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2620 -s 220
        2⤵
        • Program crash
        PID:2280

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2620-119-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB

          • memory/2620-120-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB

          • memory/2620-121-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB

          • memory/2620-122-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB

          • memory/2620-123-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB

          • memory/2620-124-0x0000000077770000-0x00000000778FE000-memory.dmp

            Filesize

            1.6MB