Analysis

  • max time kernel
    132s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 23:47

General

  • Target

    cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe

  • Size

    31KB

  • MD5

    343515181ed30e9014ed5745061b1979

  • SHA1

    c7cdf04f5903e7824c3d90b8ea18598f17c30347

  • SHA256

    cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7

  • SHA512

    ed00210dc762fd419838b94b46a99cdfa86f4efd9c7274f7d364c6089f0ff254a2260750eb5b5a5f20366e98cf3d30cbb3195034f24bdd52fc4106c4aa48a4c0

  • SSDEEP

    768:Zmh7TzTBGixfTeiZSVW7hwEkns0L7OTLNfufC3:sZ5cEks8OTBx

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe
    "C:\Users\Admin\AppData\Local\Temp\cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe"
    1⤵
      PID:5092
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 288
        2⤵
        • Program crash
        PID:1308
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5092 -ip 5092
      1⤵
        PID:380

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5092-132-0x0000000000400000-0x0000000000409000-memory.dmp

        Filesize

        36KB

      • memory/5092-133-0x0000000000400000-0x0000000000409000-memory.dmp

        Filesize

        36KB