Analysis

  • max time kernel
    111s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2022 21:52

General

  • Target

    6ed927855d8f30d096512f61b034a3f1835b5080b36b6f9530e1583f8a763999.exe

  • Size

    119KB

  • MD5

    02161b2b713037000b6ca1829d1cb781

  • SHA1

    87802e4ba123736af34fd9bca28eaa6b4717710f

  • SHA256

    6ed927855d8f30d096512f61b034a3f1835b5080b36b6f9530e1583f8a763999

  • SHA512

    f12ee70db3cc943fa6089b5a95dd64a185381ba0aa88c957c8b5578b610d208488c0ac5c64fc0eb71f47c87b9be310d7c17254100e42be1365237bd0980989c1

  • SSDEEP

    3072:ZjUrEDD3+0aSrBd5Rov8/Z5EPO+sQJxACQMftC:ZQwHO0hTEvyZ5/kVC

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6ed927855d8f30d096512f61b034a3f1835b5080b36b6f9530e1583f8a763999.exe
    "C:\Users\Admin\AppData\Local\Temp\6ed927855d8f30d096512f61b034a3f1835b5080b36b6f9530e1583f8a763999.exe"
    1⤵
      PID:4440
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4440 -s 472
        2⤵
        • Program crash
        PID:1636
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4440 -ip 4440
      1⤵
        PID:4808

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4440-132-0x0000000001000000-0x000000000102A000-memory.dmp

        Filesize

        168KB

      • memory/4440-133-0x0000000001000000-0x000000000102A000-memory.dmp

        Filesize

        168KB