Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-11-2022 14:40

General

  • Target

    3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe

  • Size

    688KB

  • MD5

    14f07df673384b69cf2be3b22c8ffa01

  • SHA1

    0004238289ff4c3bcccd02fe9e5f261e286eb719

  • SHA256

    3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df

  • SHA512

    eb0bf9a4e548a453ad976ebbf3977969c82319c6c77e80561999618de2eab297b2116c37c62440f310b692f034ad3fc3a3eef8e7e6ba6aa3ee550cf6caa2f7ff

  • SSDEEP

    12288:7s4ulzbJMF1nVEyO0w6YVzonayF9wNPnEhFRH/pQYS9sixN/PBvt7o2kJUKh:7yJMPukw6gfyF+NshFTg7nBvJkJTh

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
    "C:\Users\Admin\AppData\Local\Temp\3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe"
    1⤵
      PID:3496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 504
        2⤵
        • Program crash
        PID:4712
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 564
        2⤵
        • Program crash
        PID:2028
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3496 -ip 3496
      1⤵
        PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3496 -ip 3496
        1⤵
          PID:2932

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3496-132-0x00000000007CB000-0x00000000007D9000-memory.dmp

          Filesize

          56KB

        • memory/3496-133-0x000000000077A000-0x00000000007C7000-memory.dmp

          Filesize

          308KB

        • memory/3496-134-0x0000000002288000-0x0000000002336000-memory.dmp

          Filesize

          696KB