Analysis

  • max time kernel
    70s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-11-2022 09:48

General

  • Target

    a9af9e16e937b8a056294395d4626e8e4975ecf956a68515a501fe91b7d293f7.exe

  • Size

    669KB

  • MD5

    2a688e00ffb1b3ef3a01afbb0304e48d

  • SHA1

    c73f87770673a6cdb41e45aa9a3b20ac17189c0c

  • SHA256

    a9af9e16e937b8a056294395d4626e8e4975ecf956a68515a501fe91b7d293f7

  • SHA512

    b138e5d5de1231c7858a3012f82047a7cbc103e05fd3571061655d6b97a51d06dd18b88ec11bde38d5b7c60c3add0bc3333b86b1a97521995d177d5357c417f3

  • SSDEEP

    12288:jrpn5eBZSAD04BWlwrC7Fk2J8NL9jpddj9tPlvaGDUJeodX/3Eg:jV5e642h7WssLhpddBtPQKU/x/Ug

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a9af9e16e937b8a056294395d4626e8e4975ecf956a68515a501fe91b7d293f7.exe
    "C:\Users\Admin\AppData\Local\Temp\a9af9e16e937b8a056294395d4626e8e4975ecf956a68515a501fe91b7d293f7.exe"
    1⤵
      PID:3108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3108 -s 272
        2⤵
        • Program crash
        PID:1428
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3108 -ip 3108
      1⤵
        PID:1308

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3108-132-0x0000000002390000-0x0000000002423000-memory.dmp
        Filesize

        588KB