Analysis

  • max time kernel
    92s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 17:26

General

  • Target

    82521f2de1acab70ab1099a1c62424dff397d414b1a592c685f4d350488438b0.exe

  • Size

    316KB

  • MD5

    0d40629703371e5a010f9e039341d8a0

  • SHA1

    b120a7a9048d693b7a5a5e3de97c01568c9b930e

  • SHA256

    82521f2de1acab70ab1099a1c62424dff397d414b1a592c685f4d350488438b0

  • SHA512

    9d427977cdc777748ab6d769fd8bfc792913e1c75be655c3258f352626f02b3f6b017744db7d9a17fa92059a4350c65e302921fae2c28747b5e5478b9ecbfa01

  • SSDEEP

    1536:eCPm98cr5qpbVOVh/u6BtvtdY7ekVZG4Ucx4GtVP3CBoehjxK28ysd:elhJqX71tgBoQ8j

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\82521f2de1acab70ab1099a1c62424dff397d414b1a592c685f4d350488438b0.exe
    "C:\Users\Admin\AppData\Local\Temp\82521f2de1acab70ab1099a1c62424dff397d414b1a592c685f4d350488438b0.exe"
    1⤵
      PID:4980
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 408
        2⤵
        • Program crash
        PID:4048
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4980 -ip 4980
      1⤵
        PID:4420

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4980-132-0x0000000000400000-0x0000000000456000-memory.dmp

        Filesize

        344KB

      • memory/4980-133-0x0000000000400000-0x0000000000456000-memory.dmp

        Filesize

        344KB