Analysis

  • max time kernel
    89s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 07:32

General

  • Target

    c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe

  • Size

    130KB

  • MD5

    3409da432b765ea9e2d2c82ee73b28e8

  • SHA1

    152904705d1cca4790fec9d538e1c3d9797e3f30

  • SHA256

    c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5

  • SHA512

    b70f6dd70030eab82aa61713131729fb600960cfe658909082ceaec1be81010c390b687a0edf97ed8ba5ac03e633993a42ab48d424525d4c80c10061b68e0a93

  • SSDEEP

    3072:wO42/uCuK/yTg9MLTjLcRCozujvJfGdgmQI:p43eymMfjLSmmQ

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe
    "C:\Users\Admin\AppData\Local\Temp\c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe"
    1⤵
      PID:3400
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 376
        2⤵
        • Program crash
        PID:4768
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 416
        2⤵
        • Program crash
        PID:552
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3400 -ip 3400
      1⤵
        PID:4908
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3400 -ip 3400
        1⤵
          PID:2328

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads