Overview

overview

6

Static

static

d2e73744f0...66.exe

windows7-x64

6

d2e73744f0...66.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    90s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-11-2022 06:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d2e73744f094fab7c468839c1ed6bed927d033e540d85be64df6c89964277e66.exe

  • Size

    120KB

  • MD5

    0a8e165f3e3d8c19ff3b213088cb78d5

  • SHA1

    d172620ab28776a915fd784ed74191b1135bf644

  • SHA256

    d2e73744f094fab7c468839c1ed6bed927d033e540d85be64df6c89964277e66

  • SHA512

    24bf2e40d65935cb88885fc3451a0092564db06a4b7191db738633e3b32e29d3c89314d3c0f6b653d630c139cbcb9685a83f9f7f727f31d4eeb8bfb9517a40c0

  • SSDEEP

    1536:tkq6M6S6RxTWGpFIMusizMZwnwFRBbwCKSE8gKnVQ/1jG5z5t9txR8i2+8i2:tlp6S6RAGfosizMZEmJzXn/p5zt5F

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d2e73744f094fab7c468839c1ed6bed927d033e540d85be64df6c89964277e66.exe
    "C:\Users\Admin\AppData\Local\Temp\d2e73744f094fab7c468839c1ed6bed927d033e540d85be64df6c89964277e66.exe"
    1⤵
      PID:4376
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 468
        2⤵
        • Program crash
        PID:3496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 488
        2⤵
        • Program crash
        PID:5076
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4376 -ip 4376
      1⤵
        PID:1344
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4376 -ip 4376
        1⤵
          PID:4620

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4376-132-0x0000000001000000-0x0000000001022000-memory.dmp

          Filesize

          136KB

          Download