Analysis

  • max time kernel
    90s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2022 16:06

General

  • Target

    f267227e9eb59ae944ce96096c5637d283c5fc14f160fedf62d302bce8b1321a.exe

  • Size

    50KB

  • MD5

    0126bfd6bb7a6e7708f3c0e5247cf316

  • SHA1

    80307a0f513395023db8449dcef6991092a82e6a

  • SHA256

    f267227e9eb59ae944ce96096c5637d283c5fc14f160fedf62d302bce8b1321a

  • SHA512

    6833adac88d10da39f962e088901a2f781e63344269158e89e2b8f33433c4516e688ba1050ad95ce1f74d35c7f4ab6d698d682e2f39ff66e4be52fe612acea56

  • SSDEEP

    768:AWjpejl9x23xInzx9j1wrcz58mBuLrQWtg4vUfs99A/MbgPpuzPJm6lglPEumbo:AWIJ3zjj1w42dHbfms7At8zlgEuso

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f267227e9eb59ae944ce96096c5637d283c5fc14f160fedf62d302bce8b1321a.exe
    "C:\Users\Admin\AppData\Local\Temp\f267227e9eb59ae944ce96096c5637d283c5fc14f160fedf62d302bce8b1321a.exe"
    1⤵
      PID:1508
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 224
        2⤵
        • Program crash
        PID:2188
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1508 -ip 1508
      1⤵
        PID:1968

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1508-135-0x0000000000400000-0x00000000004083A0-memory.dmp

        Filesize

        32KB

      • memory/1508-136-0x0000000000400000-0x00000000004083A0-memory.dmp

        Filesize

        32KB