Analysis

  • max time kernel
    176s
  • max time network
    195s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 15:41

General

  • Target

    d8b3d7be45f4357f58f6fcb9e0fb7a64b572d68f22448db7e73be19700206c85.exe

  • Size

    372KB

  • MD5

    0cefea98827045ad430e42244ffb625e

  • SHA1

    0f91f7166e0c73b82b8fcaf31f8b7ecdf1588eb1

  • SHA256

    d8b3d7be45f4357f58f6fcb9e0fb7a64b572d68f22448db7e73be19700206c85

  • SHA512

    11eead8c3bcfacc4f757da21d95e051b0c4a265c76d35d48897b6b0b874c27fb394f0d859689535f0795f27583b218ad7bf48354fa468bf59bb73bf065ea1272

  • SSDEEP

    6144:s9dGnbNRy1w5Kw5Kw5Kw5sy/y/y1w5Kw5Kw5syg:s9dGvyS5Z5Z5Z5sy/y/yS5Z5Z5syg

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d8b3d7be45f4357f58f6fcb9e0fb7a64b572d68f22448db7e73be19700206c85.exe
    "C:\Users\Admin\AppData\Local\Temp\d8b3d7be45f4357f58f6fcb9e0fb7a64b572d68f22448db7e73be19700206c85.exe"
    1⤵
      PID:4068
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 264
        2⤵
        • Program crash
        PID:1040
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4068 -ip 4068
      1⤵
        PID:2428

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4068-132-0x0000000000400000-0x0000000000408D64-memory.dmp

        Filesize

        35KB

      • memory/4068-133-0x00000000006F0000-0x0000000000701000-memory.dmp

        Filesize

        68KB

      • memory/4068-134-0x0000000000400000-0x0000000000408D64-memory.dmp

        Filesize

        35KB