Analysis

  • max time kernel
    89s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-11-2022 07:49

General

  • Target

    Net Framework 3.5 offline installer 10 V1.1.exe

  • Size

    703KB

  • MD5

    87279bc1fb9e94037146a66ea2f82b42

  • SHA1

    a7331e4f055c523f5ff7e3bbe7b9c4a8e4e1a206

  • SHA256

    2e2c58eeca4d5e705c97e8676ff9e04d9e5568a18accde3c3e27de7c1481d0d5

  • SHA512

    e890c06b34ed7578b276ca41f286523d1668f7d6a31cce61ec5fae6ffc15039c044f5bd1475b6616eb01e149fe27b47e13e13dbf32b0a1075443a221602be9a0

  • SSDEEP

    12288:HwrHwFSUEFbnpIvTMs4Z4K8KrbEnxnH7Q5uZJiG+Z8KrbEnxnH7Q5uZJiG+fTMsF:HmHHy7Mr4D3xn8uKw3xn8uKVMr4CyX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Net Framework 3.5 offline installer 10 V1.1.exe
    "C:\Users\Admin\AppData\Local\Temp\Net Framework 3.5 offline installer 10 V1.1.exe"
    1⤵
      PID:2320
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2320 -s 976
        2⤵
        • Program crash
        PID:4248
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 360 -p 2320 -ip 2320
      1⤵
        PID:4752

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2320-132-0x000002DE51A10000-0x000002DE51AC6000-memory.dmp

        Filesize

        728KB

      • memory/2320-133-0x00007FFBFEF90000-0x00007FFBFFA51000-memory.dmp

        Filesize

        10.8MB

      • memory/2320-134-0x00007FFBFEF90000-0x00007FFBFFA51000-memory.dmp

        Filesize

        10.8MB