Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/11/2022, 09:36

General

  • Target

    fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe

  • Size

    376KB

  • MD5

    2bab389dd78111800bbc44448fb9abe0

  • SHA1

    4c79fec1cd2c7f5fbe2e0d52e3e15107b9577674

  • SHA256

    fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46

  • SHA512

    4c606aa333b095d557ad8ba87c6a1082080596a9f22176c1c114cb12a319a84895c02108ccb50f69cb4662e2ad89215b06c75ad7928bd42388010477c11d26d3

  • SSDEEP

    6144:wbksd6DrhpacgTGAidEl3yNhtFUaOrj0lMGWx1Lt3gv/S6RJm87ihVk67G4203+M:GzdB3yNhtcj0lM5x1LtgLRqhVkA92oP

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe
    "C:\Users\Admin\AppData\Local\Temp\fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe"
    1⤵
      PID:1756
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 536
        2⤵
        • Program crash
        PID:2720
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1756 -ip 1756
      1⤵
        PID:1796

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1756-132-0x0000000000EB0000-0x0000000000EE7000-memory.dmp

              Filesize

              220KB